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EXHIBIT 1 
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The Satoshi Affair 


Andrew O’Hagan on the many lives of 


Satoshi Nakamoto 


The Raid 


Ten men raided a house in Gordon, a north shore suburb of Sydney, at 1.30 p.m. on Wednesday, 
9 December 2015. Some of the federal agents wore shirts that said ‘Computer Forensics’; one carried 
a search warrant issued under the Australian Crimes Act 1914. They were looking for a man named 
Craig Steven Wright, who lived with his wife, Ramona, at 43 St Johns Avenue. The warrant was 
issued at the behest of the Australian Taxation Office. Wright, a computer scientist and businessman, 
headed a group of companies associated with cryptocurrency and online security. As one set of 
agents scoured his kitchen cupboards and emptied out his garage, another entered his main 
company headquarters at 32 Delhi Road in North Ryde. They were looking for ‘originals or copies’ of 
material held on hard drives and computers; they wanted bank statements, mobile phone records, 
research papers and photographs. The warrant listed dozens of companies whose papers were to be 
scrutinised, and 32 individuals, some with alternative names, or alternative spellings. The name 
‘Satoshi Nakamoto’ appeared sixth from the bottom of the list. 
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Craig Wright in the Oxford Circus office. 
Some of the neighbours say the Wrights were a little distant. She was friendly but 


he was weird — to one neighbour he was ‘Cold-Shoulder Craig’ — and their landlord 
wondered why they needed so much extra power: Wright had what appeared to be 
a whole room full of generators at the back of the property. This fed a rack of 
computers that he called his ‘toys’, but the real computer, on which he’d spent a lot 
of money, was nearly nine thousand miles away in Panama. He had already taken 
the computers away the day before the raid. A reporter had turned up at the house 
and Wright, alarmed, had phoned Stefan, the man advising them on what he and 
Ramona were calling ‘the deal’. Stefan immediately moved Wright and his wife into 
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a luxury apartment at the Meriton World Tower in Sydney. They'd soon be moving 
to England anyway, and all parties agreed it was best to hide out for now. 


At 32 Delhi Road, the palm trees were throwing summer shade onto the concrete 
walkways — ‘Tailor Made Office Solutions’, it said on a nearby billboard — and people 
were drinking coffee in Deli 32 on the ground floor. Wright's office on level five was 
painted red, and looked down on the Macquarie Park Cemetery, known as a place 
of calm for the living as much as the dead. No one was sure what to do when the 
police entered. The staff were gathered in the middle of the room and told by the 
officers not to go near their computers or use their phones. ‘I tried to intervene,’ one 
senior staff member, a Dane called Allan Pedersen, remarked later, ‘and said we 
would have to call our lawyers.’ 


Ramona wasn’t keen to tell her family what was happening. The reporters were 
sniffing at a strange story — a story too complicated for her to explain — so she just 
told everyone that damp in the Gordon house had forced them to move out. The 
place they moved into, a tall apartment building, was right in the city and Wright felt 
as if he was on holiday. On 9 December, after their first night in the new apartment, 
Wright woke up to the news that two articles, one on the technology site Gizmodo, 
the other in the tech magazine Wired, had come out overnight fingering him as the 
person behind the pseudonym Satoshi Nakamoto, who in 2008 published a white 
paper describing a ‘peer-to-peer electronic cash system’ — a technology Satoshi 
went on to develop as bitcoin. Reading the articles on his laptop, Wright knew his 
old life was over. 


By this point, cameras and reporters were outside his former home and his office. 
They had long heard rumours, but theGizmodo and Wired stories had sent the 
Australian media into a frenzy. It wasn’t clear why the police and the articles had 
appeared on the same day. At about five that same afternoon, a receptionist called 
from the lobby of Wright’s apartment building to say that the police had arrived. 
Ramona turned to Wright and told him to get the hell out. He looked at a desk in 
front of the window: there were two large laptop computers on it — they weighed a 
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few kilos each, with 64 gigabytes of RAM — and he grabbed the one that wasn’t yet 
fully encrypted. He also took Ramona’s phone, which wasn’t encrypted either, and 
headed for the door. They were on the 63rd floor. It occurred to him that the police 
might be coming up in the elevator, so he went down to the 61st floor, where there 
were office suites and a swimming pool. He stood frozen for a minute before he 
realised he’d rushed out without his passport. 


Ramona left the apartment shortly after Wright. She went straight down to the 
basement car park and was relieved to find the police weren't guarding the exits. 
She jumped into her car, a hire vehicle, and, in her panic, crashed into the exit 
barrier. But she didn’t stop, and was soon on the motorway heading to north 
Sydney. She just wanted to be somewhere familiar where she would have time to 
think. She felt vulnerable without her phone, and decided to drive to a friend’s and 
borrow his. She went to his workplace and took his phone, telling him she couldn't 
explain because she didn’t want to get him involved. 


Meanwhile, Wright was still standing beside the swimming pool in his suit, with a 
laptop in his arms. He heard people coming up the stairs, sped down the corridor 
and ducked into the gents. A bunch of teenagers were standing around but seemed 
not to notice him. He went to the furthest cubicle and deliberately kept the door 
unlocked. (He figured the police would just look for an engaged sign.) He was 
standing on top of the toilet when he heard the officers come in. They asked the 
youngsters what they were doing, but they said ‘nothing’ and the police left. Wright 
stayed in the cubicle for a few minutes, then went out and used his apartment 
keycard to hide in the service stairwell. Eventually, a call came from Ramona on her 
friend’s phone. She was slightly horrified to discover he was still in the building and 
told him again to get out. He, too, had a rental car, and had the key in his pocket. 
He went down sixty flights of stairs to the car park in the basement, unlocked his car 
and opened the boot, where he lifted out the spare wheel and put his laptop in the 
wheel cavity. He drove towards the Harbour Bridge and got lost in the traffic. 
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Craig Wright in 2016. 
As Ramona drove along she began texting the mysterious Stefan, who was at 


Sydney Airport, having already checked in for a flight to Manila, where he lived. 
Stefan had to make a fuss to get his bag removed from the plane and then he spoke 
to Ramona, telling her that Wright would have to get out of the country. She didn’t 
argue. She called the Flight Centre and asked what flights were leaving. ‘To where?’ 
asked the saleswoman. 


‘Anywhere,’ Ramona said. Within ten minutes she had booked her husband on a 
flight to Auckland. 
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In the early evening, Wright, scared and lost, made his way to Chatswood. He 
texted Ramona to come and meet him, and she immediately texted back saying he 
should go straight to the airport. She’d booked him a flight. ‘But | don’t have my 
passport,’ he said. Ramona was afraid she’d be arrested if she returned to their 
apartment, but her friend said he’d go into the building and get the passport. They 
waited until the police left the building, then he went upstairs. A few minutes later he 
came back with the passport, along with the other computer and a power supply. 


They met Wright in the airport car park. Ramona had never seen him so worried. ‘I 
was shocked,’ he later said. ‘| hadn’t expected to be outed like that in the media, 
and then to be chased down by the police. Normally, I’d be prepared. I’d have a bag 
packed.’ As Ramona gave him the one-way ticket to Auckland, she was anxious 
about when she would see him again. Wright said New Zealand was a bit too close 
and wondered what to do about money. Ramona went to an ATM and gave him 
$600. He bought a yellow bag from the airport shop in which to store his computers. 
He had no clothes. ‘It was awful saying goodbye to him,’ Ramona said. 


In the queue for security, he felt nervous about his computers. His flight was about 
to close when the security staff flagged him down. He was being taken to an 
interview room when an Indian man behind him started going berserk. It was just 
after the Paris bombings; the man’s wife was wearing a sari and the security staff 
wanted to pat her down. The man objected. All the security staff ran over to deal 
with the situation and told Wright to go. He couldn't believe his luck. He put his head 
down and scurried through the lounge. 


Back at Wright's office, Allan Pedersen was being interviewed by the police. He 
overheard one of them ask: ‘Have we got Wright yet?’ 


‘He’s just hopped a flight to New Zealand,’ his colleague said. 


Wright was soon 30,000 feet above the Tasman Sea watching the programmer 
Thomas Anderson (Keanu Reeves) being chased by unknowable agents in The 
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Matrix. Wright found the storyline strangely comforting; it was good to know he 


wasn’t alone. 


At Auckland Airport, Wright kept his phone on flight mode, but turned it on to use the 
airport’s wifi to Skype with Stefan, using a new account. They had a discussion 
about how to get him to Manila. There was a big rock concert that night in Auckland, 
and all the hotels were full, but he crossed town in a cab and managed to get a 
small room at the Hilton. He booked two nights, using cash. He knew how to get 
more cash out of ATMs than the daily limit, so he worked several machines near the 
hotel, withdrawing $5000. He ordered room service that night and the next morning 
went to the Billabong store in Queen Street to buy some clothes. He felt agitated, 
out of his element: normally he would wear a suit and tie — he enjoys the notion that 
he is too well dressed to be a geek — but he bought a T-shirt, a pair of jeans and 
some socks. On the way back to the hotel he got a bunch of SIM cards, so that his 
calls wouldn’t be monitored. Back at the Hilton he was packing up his computers 
when the dependable Stefan came on Skype. He told Wright to go to the airport and 
pick up a ticket he’d left him for a flight to Manila. His picture was all over the 
papers, along with the story that he was trying to escape. 


Within hours of Wright’s name appearing in the press, anonymous messages 
threatened to reveal his ‘actual history’. Some said he had been on Ashley Madison, 
the website that sets up extramarital affairs, others that he’d been seen on Grindr, 
the gay hook-up app. During a six-hour layover in Hong Kong, he killed his email 
accounts and tried to wipe his social media profile, which he knew would be heavy 
with information he wasn't keen to publicise: ‘Mainly rants,’ he said later. When he 
got to Manila airport, Stefan picked him up. They went to Stefan’s apartment and 
the maid washed Wright's clothes while he set up his laptops on the dining-room 
table. They spent the rest of Saturday wiping his remaining social media profile. 
Stefan didn’t want any contact to be possible: he wanted to cut Wright off from the 
world. The next day he put him on a plane to London. 
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Mayfair 


Technology is constantly changing the lives of people who don't really understand it 
— we drive our cars, and care nothing for internal combustion — but now and then a 
story will break from that frontier. | was one of the people who had never heard of 
Satoshi Nakamoto or the blockchain — the invention underlying bitcoin, which 
verifies transactions without the need for any central authority — or that it is the 
biggest thing in computer science. It was news to me that the banks were grabbing 
onto the blockchain as the foundation of a future ‘internet of value’. The story of a 
mythical computer scientist was an odd one to come my way. I’m not much detained 
by thoughts of new computer paradigms. (I’m still getting the hang of the first one.) 
But to those who are much more invested in the world of tomorrow, the Satoshi 
story has the lineaments of a modern morality tale quite independent of stock 
realities. There are things, there are always things, that others assume are at the 
centre of the universe but don’t make a scratch on your own sense of the everyday 
world. This story was like that for me, enclosing me in an enigma | couldn't have 
named. A documentary is a fashioned thing, of course, as fashioned as fiction in its 
own ways, but | had to overcome my own bafflement — as will you — to enter this 
world. 


A few weeks before the raid on Craig Wright's house, when his name still hadn't 
ever been publicly associated with Satoshi Nakamoto, | got an email from a Los 
Angeles lawyer called Jimmy Nguyen, from the firm Davis Wright Tremaine 
(self-described as ‘a one-stop shop for companies in entertainment, technology, 
advertising, sports and other industries’). Nguyen told me that they were looking to 
contract me to write the life of Satoshi Nakamoto. ‘My client has acquired life story 
rights ... from the true person behind the pseudonym Satoshi Nakamoto — the 
creator of the bitcoin protocol,’ the lawyer wrote. ‘The story will be [of] great interest 
to the public and we expect the book project will generate significant publicity and 
media coverage once Satoshi's true identity is revealed.’ 


Journalists, it turned out, had spent years looking for Nakamoto. His identity was 
one of the great mysteries of the internet, and a holy grail of investigative reporting, 
with writers who couldn’t dig up evidence simply growing their own. For theNew 
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Yorkers Joshua Davis the need to find him seemed almost painful. ‘Nakamoto 
himself was a cipher,’ he wrote in October 2011: 


Before the debut of bitcoin, there was no record of any coder with that name. He used an 
email address and a website that were untraceable. In 2009 and 2010, he wrote 
hundreds of posts in flawless English, and though he invited other software developers to 
help him improve the code, and corresponded with them, he never revealed a personal 
detail. Then, in April 2011, he sent a note to a developer saying that he had ‘moved on to 
other things’. He has not been heard from since. 


Davis went on to examine Satoshi's writing quite closely and concluded that he 
used British spelling and was fond of the word ‘bloody’. He then named a 
23-year-old Trinity College Dublin graduate student, Michael Clear, who quickly 
denied it. The story went nowhere and Clear went back to his studies. Then Leah 
McGrath Goodman wrote a piece for Newsweekclaiming Satoshi was a maths 
genius called Dorian Nakamoto, who lived in the Californian suburb of Temple City 
and didn't actually know, it turned out, how to pronounce bitcoin. When Goodman’s 
article ran on the magazine’s cover reporters from all over the world arrived on 
Dorian’s doorstep. He said he would give an interview to the first person who would 
take him to lunch. It turned out that his hobby wasn’t alternative currencies but 
model trains. Someone calling himself Satoshi Nakamoto, and using Satoshi's 
original email address, visited one of the forums Satoshi used to haunt and posted 
the message: ‘Il am not Dorian Nakamoto.’ Other commentators, including 
Nathaniel Popper of the New York Times, named Nick Szabo, a cool cryptocurrency 
nut and the inventor of Bit Gold, but he denied it profusely. Forbes believed it was 
Hal Finney, who, the blockchain irrefutably showed, was the first person in the world 
to be sent bitcoin by Satoshi. Finney, a native Californian, was an expert 
cryptographer whose involvement in the development of bitcoin was vital. He was 
diagnosed with motor neurone disease in 2009 and died in 2014. It came to seem 
that the holy grail would remain out of reach. ‘Many in the bitcoin community ... in 
deference to the bitcoin creator's clear desire for privacy ... didn’t want to see the 
wizard unmasked, Popper wrote in the New York Times. ‘But even among those 
who said this, few could resist debating the clues the founder left behind.’ 


The ‘Stefan’ who was hovering during the raid on Craig Wright's house and office is 
Stefan Matthews, an IT expert whom Wright had known for ten years, since they 


both worked for the online gambling site Centrebet. In those days, around 2007, 
Wright was often hired as a security analyst by such firms, deploying his skills as a 
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computer scientist (and his experience as a hacker) to make life difficult for 
fraudsters. Wright was an eccentric guy, Stefan Matthews remembered, but known 
to be a reliable freelancer. Matthews said that Wright had given him a document to 
look at in 2008 written by someone called Satoshi Nakamoto, but Matthews had 
been busy at the time and didn’t read it for a while. He said that Wright was always 
trying to get him interested in this new venture called bitcoin. He tried to sell him 
50,000 coin for next to nothing, but Matthews wasn’t interested, he told me, 
because Wright was weird and the whole thing seemed a bit cranky. A few years 
later, however, Matthews realised that the document he had been shown was, in 
fact, an original draft of the by now famous white paper by Satoshi Nakamoto. (Like 
the governments they despise, bitcoiners deal — when it comes to ideas — in ‘white 
papers’, as if they were issuing laws.) Last year, when Wright was in financial 
trouble, he approached Matthews several times. By that time, Matthews had 
become friendly with Robert MacGregor, the founder and CEO of a Canada-based 
money-transfer firm called nTrust. Matthews encouraged MacGregor to come to 
Australia and assess Wright’s value as an investment opportunity. Wright had 
founded a number of businesses that were in trouble and he was deeply embedded 
in a dispute with the ATO. Nevertheless, Matthews told MacGregor, Wright was 
almost certainly the man behind bitcoin. 


Matthews argued that since Satoshi's disappearance in 2011, Wright had been 
working on new applications of the blockchain technology he had invented as 
Satoshi. He was, in other words, using the technology underlying bitcoin to create 
new versions of the formula that could, at a stroke, replace the systems of 
bookkeeping and registration and centralised authority that banks and governments 
depend on. Wright and his people were preparing dozens of patents, and each 
invention, in a specific way, looked to rework financial, social, legal or medical 
services, expanding on the basic idea of the ‘distributed public ledger’ that 
constitutes the blockchain. This is utopian thinking, even by normal geek standards, 
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but it’s a hot topic in computer science and banking at the moment, and hundreds of 
millions of dollars are being invested in such ideas. Thus: Matthews’s proposal. 


After initial scepticism, and in spite of a slight aversion to Wright’s manner, 
MacGregor was persuaded, and struck a deal with Wright, signed on 29 June 2015. 
MacGregor says he felt sure that Wright was bitcoin’s legendary missing father, and 
he told me it was his idea, later in the drafting of the deal, to insist that Satoshi's ‘life 
rights’ be included as part of the agreement. Wright’s companies were so deep in 
debt that the deal appeared to him like a rescue plan, so he agreed to everything, 
without, it seems, really examining what he would have to do. Within a few months, 
according to evidence later given to me by Matthews and MacGregor, the deal 
would cost MacGregor’s company $15 million. ‘That’s right,’ Matthews said in 
February this year. ‘When we signed the deal, $1.5 million was given to Wright's 
lawyers. But my main job was to set up an engagement with the new lawyers ... and 
transfer Wright's intellectual property to nCrypt’ — a newly formed subsidiary of 
nTrust. ‘The deal had the following components: clear the outstanding debts that 
were preventing Wright's business from getting back on its feet, and work with the 
new lawyers on getting the agreements in place for the transfer of any 
non-corporate intellectual property, and work with the lawyers to get Craig’s story 
rights.’ From that point on, the ‘Satoshi revelation’ would be part of the deal. ‘It was 
the cornerstone of the commercialisation plan,’ Matthews said, ‘with about ten 
million sunk into the Australian debts and setting up in London.’ 


The plan was always clear to the men behind nCrypt. They would bring Wright to 
London and set up a research and development centre for him, with around thirty 
staff working under him. They would complete the work on his inventions and patent 
applications — he appeared to have hundreds of them — and the whole lot would be 
sold as the work of Satoshi Nakamoto, who would be unmasked as part of the 
project. Once packaged, Matthews and MacGregor planned to sell the intellectual 
property for upwards of a billion dollars. MacGregor later told me he was speaking 
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to Google and Uber, as well as to a number of Swiss banks. ‘The plan was to 
package it all up and sell it,’ Matthews told me. ‘The plan was never to operate it.’ 





Clockwise from top left: Hal Finney, Gavin Andresen, Robert MacGregor, Stefan Matthews 
* 


Since the time | worked with Julian Assange, my computers have been hacked 
several times. It isn’t unusual for me to find that material has been wiped, and | was 
careful to make sure the lawyer’s approach wasn’t part of a sting operation. But | 
was curious to see what these men had. | assumed MacGregor — or someone 
behind him — must be the ‘client’ referred to in the email | had received from 
California. On Thursday, 12 November, | turned up at MacGregor’s office near 
Oxford Circus, where | signed in under a pseudonym and made my way to a 
boardroom wallpapered with mathematical formulae. MacGregor came into the 
room wearing a tailored jacket and jeans, with a blue-edged pocket square in his 
breast pocket, a scarf and brown brogue boots. He was 47 but looked about 29. 
There was something studied about him — the Alexander McQueen scarf, the 
lawyerly punctilio — and I'd never met anyone who spoke so easily about such large 
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sums of money. When | asked him the point of the whole exercise he said it was 
simple: ‘Buy in, sell out, make some zeroes.’ 


MacGregor described Wright to me as ‘the goose that lays the golden egg’. He said 
that if | agreed to take part | would have exclusive access to the whole story, and to 
everyone around Wright, and that it would all end with Wright proving he was 
Satoshi by using cryptographic keys that only Satoshi had access to, those 
associated with the very first blocks in the blockchain. MacGregor told me this might 
happen at a public TED talk. He said it would be ‘game over’. Wright's patents 
would then be sold and Wright could get on with his life, out of the public eye. ‘All he 
wants is peace to get on with his work,’ MacGregor told me at that first meeting. 
‘And how this ends, for me, is with Craig working for, say, Google, with a research 
staff of four hundred.’ 


| told MacGregor that there would have to be a process of verification. We talked 
about money, and negotiated a little, but after several meetings | decided | wouldn't 
accept any. | would write the story as | had every other story under my name, by 
observing and interviewing, taking notes and making recordings, and sifting the 
evidence. ‘It should be warts and all,’ MacGregor said. He said it several times, but | 
was never sure he understood what it meant. This was a changing story, and | was 
the only one keeping account of the changes. MacGregor and his co-workers were 
already convinced Wright was Satoshi, and they behaved, to my mind, as if that 
claim was the end of the story, rather than the beginning. 


| don’t mean to imply anything sinister. The company was excited by the project and 
so was |. Very quickly we were working hand in hand: | reserved judgment (and 
independence) but | was very caught up in the thought of the story unfolding as 
planned. At this point, nobody knew who Craig Wright was, but he appeared, from 
the initial evidence, to have a better claim to being Satoshi Nakamoto than anyone 
else had. He seemed to have the technical ability. He also had the right social 
history, and the timeline worked. The big proof was up ahead, and how could it not 
be spectacular? | went slowly forward with the project, and said no to everything 
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that would hamper my independence. This would become an issue later on with 
MacGregor and Matthews, or the men in black, as I’d taken to calling them, but for 
those first few months, nobody asked me to sign anything and nobody refused me 
access. Mysteries would open up, and some would remain, but there seemed no 
mystery about the fact that these people were confident that a supremely important 
thing was happening and that the entire process should be witnessed and recorded. 
My emails to MacGregor took it for granted that what would be good for my story, in 
terms of securing proof, would also be good for his deal, and that seemed perfectly 
true. Yet | feel bad that | didn’t warn him of the possibility that this might not be what 
happened, that my story wouldn’t die if the deal died, that human interest doesn’t 
stop at success. 


It was at this point, four weeks after my first meeting with MacGregor, that Wired 
and Gizmodo reported that he might be Satoshi. The news unleashed a tsunami of 
responses from the cryptocurrency community, and most of it was bad for Wright’s 
credibility. Had he left artificial footprints to suggest his involvement with bitcoin had 
been earlier than it was? Had he exaggerated the number and nature of the 
degrees he’d accumulated from various universities? Why did the company that 
supplied the supercomputer he claimed to have bought with amassed bitcoin say it 
had never heard of him? 


‘The smell,’ as one commentator said, ‘was a mile high.’ The nCrypt people were 
unfazed by this mudslinging, believing that every one of the charges made against 
Wright could be easily disproved. Wright produced an impressive paper showing 
that his ‘footprint’ wasn’t faked and that the ‘cryptographic’ evidence against him 
was bogus (people continue to argue on this point). He produced a letter from the 
supercomputer supplier acknowledging the order. Charles Sturt University provided 
a photocopy of his staff card, proving he had lectured there, and Wright sent me a 
copy of the thesis he’d submitted for a doctorate his critics claim he doesn’t have. 


* 
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| had arrived five minutes early at 28-50 Degrees, a wine bar and restaurant in 
Mayfair. It was just before 1 p.m. on 16 December and the lunchtime crowd, men in 
blue suits and white shirts, were eating oysters and baby back ribs and drinking 
high-end wine by the glass. A jeroboam of Graham’s ten-year-old tawny port stood 
on the bar, and | was inspecting it wnen MacGregor arrived with Mr and Mrs Smith. 
That's what he’d been calling them in his emails to me. Craig Wright, 45 years old, 
wearing a white shirt under a black jacket, a pair of blue chinos, a belt with a large 
Armani buckle and very green socks, wasn't the kind of guy who seems comfortable 
in a swish restaurant. He sat across from me and lowered his head and at first he let 
MacGregor do the talking. Ramona was very friendly, chatting about their time in 
London as if they were a couple of holidaymakers who'd just blown into Mayfair. 
She wasn't drinking, but the rest of us ordered a glass of Malbec each. When Wright 
lifted his head to laugh at something, | noticed he had a nice smile but uneven teeth, 
and a scar that climbed from the top of his nose to the area just above his left 
eyebrow. He hadn't shaved since he'd left Sydney. 


Wright told me he was rubbish at small talk. He too wanted what | wrote to be ‘warts 
and all’; he felt he was being misunderstood by everybody, and normally that 
wouldn't bother him but he had to consider the respectability of his work, and his 
family’s rights. He appeared to ponder this for a moment, then he told me his old 
neighbours at the house in Gordon hadn't been friendly. 


‘They barely even knew your name,’ Ramona said. 
‘They do now,’ he replied. 


| found him easier to talk to than I'd expected. He said his father had worked for the 
NSA (he couldn’t explain this), but that, to this day, his mother thinks he worked for 
Nasa. ‘The few people | care about | care about a lot,’ he said, ‘and | care about the 
state of the world. But there’s not much in between.’ He said he was happy | was 
writing about him because he wanted ‘to step into history’, but mainly because he 
wanted to tell the story of the brilliant people he had collaborated with. He and 
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Ramona were both jet-lagged and anxious about things back home. ‘We should 
have been having our company’s Christmas party today,’ Ramona said. 


MacGregor asked Wright if being a libertarian had influenced his work, or if the work 
had turned him into a libertarian. ‘I was always libertarian,’ he replied, and then he 
told me his father had more or less kidnapped him after his parents got divorced. He 
hated being told what to do — that was one of his main motivations. He believed in 
freedom, and in what freedom would come to mean, and he said his work would 
guarantee a future in which privacy was protected. ‘Where we are,’ he said, ‘is a 
place where people can be private and part of that privacy is to be someone other 
than who they were. Computing will allow you to start again, if you want to. And that 
is freedom.’ In fact he never stopped imagining different lives for himself. That 
afternoon he seemed preoccupied by the case people were making against his 
being Satoshi. He shook his head a lot and said he wished he could just get on in 
silence with his work. ‘If you want to stay sane through this, ignore Reddit,’ his wife 
told him. 


The next day, 17 December, we met again, in a private room in Claridge’s. You 
could see outside, over the rooftops, cranes garlanded in fairy lights. Ramona came 
in looking tired and totally fed up. From time to time, especially when exhausted, 
she would resent the hold these people had over them. ‘We have sold our souls,’ 
she said to me in a quiet moment. 


MacGregor said he would spend the evening preparing paperwork to be signed by 
Wright the following day. This would effectively be the final signing over to nCrypt of 
the intellectual property held by Wright’s companies. This was the main plank in the 
deal. MacGregor was confident the work was ‘world historical’, that it would change 
the way we lived. He regularly described the blockchain as the greatest invention 
since the internet. He said that what the internet had done for communication, the 
blockchain would do for value. 
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MacGregor explained that Wright's Australian companies were being signed over to 
nCrypt and that he’d extended an ‘olive branch’ to the ATO, which had responded 
quickly and positively. A lot of trouble with the ATO had to do with whether bitcoin 
was a commodity or a currency and how it should be taxed. It also had doubts about 
whether Wright’s companies had done as much research and development as they 
claimed, and whether they were therefore entitled to the tax rebates they had 
applied for. The ATO had said it couldn't see where the spending was going. Some 
critics in the media claimed Wright's companies had been set up only for the 
purpose of claiming rebates, though not even the ATO went that far. 


Wright told me that thanks to the tax office they’d had to lay out all the research for 
their patents, which had been useful since the nCrypt team was in a hurry: the 
banks, now alert to cryptocurrencies and the effectiveness of the blockchain, are 
rushing to create their own versions. At that moment, Bank of America was 
patenting ten ideas for which Craig and his team told me they had a claim to ‘prior 
art’. Governments spent a long time denying the value of bitcoin — seeing it as 
unstable, or the currency of criminals — but now they celebrate the potential of the 
technology behind it. 


‘They're behaving like children,’ Wright said of the ATO. 


MacGregor looked at his watch. He straightened his cuffs. ‘l see this as a pivotal 
moment in history ... It’s like being able to go back in time and watch Bill Gates in 
the garage.’ He turned to Wright. “You released this thing into the wild. Some people 
got it right and some people got it wrong. But you’ve got a vision of where it’s going 
next and next and next.’ 


‘None of this would have worked without bitcoin,’ Wright said, ‘but it’s a wheel and | 
want to build a car.’ 


Ramona looked depressed. She was worried that her husband, as the person 
claiming to have invented bitcoin, might be held liable for the actions of those who’d 
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used the currency for nefarious purposes. ‘He didn’t issue a currency,’ MacGregor 
assured her. ‘This is just technology — it is not money.’ Ramona was still anxious. 
‘We're talking about legal risk ... I’m giving you the legal answer,’ MacGregor said. ‘I 
would stake my career on the fact that the creation of bitcoin is not a prosecutable 
event.’ 


Right to the end, the Wrights would express worries about things Craig did as a 
young computer forensics worker. Much of his professional past looked 
questionable, but in the meeting room at Claridge’s he simply batted the past away. 
‘It's what you're doing now that matters. I’m not perfect. | never will be ... All these 
different people arguing about what Satoshi should be at the moment, it’s crazy.’ 


Ninjutsu 


Wright's father, Frederick Page Wright, was a forward scout in Vietnam, serving with 
the 8th Battalion of the Australian army. ‘He lost all his friends,’ Wright told me, 
‘every single one of them’ — and before long he was drinking and being violent 
towards Wright's mother, who eventually left him. Both Wright and his mother, when 
| went to meet her in Brisbane in March, told me about his father’s anger at his own 
mother: he sent all his army pay cheques home to her and she spent them while he 
was away. He also dreamed of a football career that never happened. ‘I have a chip 
on my shoulder,’ Wright said, ‘but his was bigger.’ 


‘Did you admire him?’ 


‘He never admired me. | was never fucking good enough. We played chess from 
when | was three or four and if | made a wrong move he'd wallop me. We clashed 
right from the beginning.’ 


The boy had two great influences. The first was his grandfather Ronald Lyman, who 
his family claims received the first degree awarded by the Marconi School of 
Wireless in Australia, and who served in the army as a signals officer. They also say 
he later became a spy with the Australian security services. Craig’s favourite place 
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was his grandfather’s basement, a paradise of early computing. ‘We'd sit there and 
look at these books of log tables,’ he told me. ‘I loved doing it.’ Captain Lyman had 
an old terminal and a Hayes 80-103A modem that they used to connect to the 
University of Melbourne’s network. To keep Craig quiet while he worked, Pop, as 
the children called him, would let him write code. ‘I found this community of 
hackers,’ Wright says, ‘and | worked out how to interact with them. | started building 
games and hacking other people’s games. In time, I’d be pulling apart hacker code, 
and eventually | did this for companies, to help them create defences against 
hackers.’ 


His mother told me he was sometimes picked on at school. ‘He struggled,’ she said, 
‘but after a while | sent him to Padua College’ — a private Catholic college in 
Brisbane — ‘and he shone there. | mean, he was different. He used to dress up and 
he had an obsession with Japanese culture. He had big samurai swords.’ 


‘As a teenager?’ 


‘Dressed up in samurai clothes, with the odd wooden shoes and everything. Making 
all the noises. His sisters would complain about him embarrassing them: “We're 
down the park, we’ve got friends down there, and he’s walking around with webbed 
feet.” He used to have this group of nerdy friends in the 1980s: they’d come around 
in horn-rimmed glasses and play Dungeons & Dragons for hours.’ 


He had a karate teacher called Mas who moved him quickly from karate through 
judo to Ninjutsu. Craig broke his knuckles over and over again and ‘became 
stronger’, he told me, because ‘the pain led to a “me” that could handle more.’ The 
thing that attracted him most to martial arts was the discipline. Learning to become 
a ninja involves 18 disciplines, including bdjutsu(tactics), hensojutsu (disguise and 
impersonation), intonjutsu(escape and concealment) and shinobi-iri (stealth and 
infiltration). He walked home from his lessons feeling stronger, like another self. 


Case 9:18-cv-80176-BB Document 24-1 Entered on FLSD Docket 05/14/2018 Page 21 of 96 
When he was 18, Wright joined the air force. ‘They locked me in a bunker,’ he told 
me, ‘and | worked on a bombing system. Smart bombs. We needed fast code, and | 
did that.’ When he was in his twenties a melanoma appeared on his back and he 
had several skin grafts. ‘This was after he got out of the air force,’ his mother told 
me, ‘and when he recovered he was off to university, and it’s been degrees, 
degrees, degrees since then.’ He went to the University of Queensland to study 
computer systems engineering. And over the following 25 years he would finish, or 
not finish, or finish and not do the graduation paperwork for degrees in digital 
forensics, nuclear physics, theology, management, network security, international 
commercial law and statistics. After our first full interview, he went home to work on 
an assignment for a new course he was taking at the University of London, a 
masters in quantitative finance. 


Over the months | spent with him, | noticed that he loved the idea of heroism and 
was strongly attracted to creation myths. One of the first things he emailed me was 
a copy of one of his dissertations, ‘Gnarled Roots of a Creation Mythos’. | noticed it 
was dedicated to Mas, his martial arts instructor. The text wasn’t merely an 
argument for self-invention, but a feminist exegesis that railed against patriarchal 
views of the Fall. Wright also speaks of the pilgrim-visitor in the ‘world garden’. 
‘While in the garden, the pilgrim almost inevitably suffers deception. His or her 
senses, enchanted by illusory and transitory formal appearances, betray his or her 
soul and lead to sin.’ 


Wright said he had never expected the myth of Satoshi to gather such force. ‘We 
were all used to using pseudonyms,’ he told me. ‘That’s the cypherpunk way. Now 
people want Satoshi to come down from the mountain like a messiah. | am not that. 
And we didn’t mean to set up a myth that way.’ Satoshi was loved by bitcoin fans for 
making a beautiful thing and then disappearing. They don’t want Satoshi to be 
wrong or contradictory, boastful or short-tempered, and they don’t really want him to 
be a 45-year-old Australian called Craig. 
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While reading Wright's ideas on creation, | kept thinking of his karate teacher and 
the position he had in the young man’s life. An offhand remark Wright made had 
stayed with me. It was about storytelling and how a possible meaning of freedom 
might reside not only in martial arts, in the ability to defend oneself, but in the ability 
to make oneself. Mas ‘taught me a lot of Eastern philosophy and gave me the 
means to become myself’, Wright said. One day Mas told him about Tominaga 
Nakamoto. ‘He was a Japanese merchant philosopher,’ Wright told me. ‘I read 
translations of his stuff, material from the 1740s.’ 


Weeks later, | was in the kitchen of the house Wright was renting in London drinking 
tea with him when | noticed a book on the worktop called Visions of Virtue in 
Tokugawa Japan.|’'d done some mugging up by then and was keen to nail the name 
thing. 


‘So that’s where you say you got the Nakamoto part?’ | asked. ‘From the 
18th-century iconoclast who criticised all the beliefs of his time?’ 


‘Yes.’ 
‘What about Satoshi?’ 


‘It means “ash’”,’ he said. ‘The philosophy of Nakamoto is the neutral central path in 
trade. Our current system needs to be burned down and remade. That is what 
cryptocurrency does — it is the phoenix ...’ 


‘So satoshi is the ash from which the phoenix ...’ 


‘Yes. And Ash is also the name of a silly Pokémon character. The guy with Pikachu.’ 
Wright smiled. ‘In Japan the name of Ash is Satoshi,’ he said. 


‘So, basically, you named the father of bitcoin after Pikachu’s chum?’ 
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‘Yes,’ he said. ‘That'll annoy the buggery out of a few people.’ This was something 
he often said, as if annoying people was an art. 


Wright’s generation, now in their mid to late forties, are seeing a world that enlarges 
on their teenage kicks. For Wright, as for Jeff Bezos, the rules of how to shop and 
how to think and how to live are extrapolations of dreams they had sitting in a box 
room somewhere. ‘The person who experiences greatness must have a feeling for 
the myth he is in,’ Frank Herbert wrote inDune, Wright's favourite novel as a 
teenager. ‘Dune was really about people,’ Wright told me. ‘It was about the idea that 
we don't want to leave things to machines and [should instead] develop as humans. 
But | see things a little differently from Mr Herbert. | see that it’s not one or the other 
— man or machines - it’s a symbiosis and a way of becoming something different 
together.’ This kind of cyberpunk energy — as opposed to cypherpunk, which came 
later — delivered Wright’s generation of would-be computer scientists into the 
brightness of the future. 


After getting his first degree, Wright settled into IT roles in a number of companies. 
He became a well-known ‘go-to guy’ among startups and security firms: he always 
solved the problem and they always came back for more. ‘When I’ve characterised 
Craig to colleagues and friends,’ Rob Jenkins, who worked with Wright in this period 
and now holds a senior position in Australia’s Westpac Bank, told me, ‘I’ve always 
described him as the most qualified person I’ve ever known. I’ve worked with other 
smart people but Craig has such a strong desire to pursue knowledge. He has 
passion. And bitcoin was just another one of those bright things he was talking 
about.’ 


‘Sketch it out for me,’ | said to Wright. ‘Those years before bitcoin. What was 
happening that would later have an influence? | want to know about all the 
precursors, all the previous attempts to solve the problem.’ 


‘Back in 1997 there was Tim May’s BlackNet ...’ May was a crypto-anarchist, who 
had been operating and agitating in the cypherpunk community since the 
mid-1980s. ‘Computer technology is on the verge of providing the ability for 
individuals and groups to communicate and interact with each other in a totally 
anonymous manner,’ he wrote in the Crypto-Anarchist Manifesto in 1988. BlackNet 
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operated like a precursor to WikiLeaks, soliciting secret information with payments 
made by untraceable, digital money. 


‘We all have a narcissistic hubris,’ Wright told me. He wanted to take May’s 
BlackNet idea further. He was also enthusiastic, in those early days, about 
Hashcash and B-money. The idea behind Hashcash, a ‘proof of work’ algorithm 
where each of a group of computers performs a small task that can be instantly 
verified (thus making life impossible for spammers, who depend on multiple emails 
going out with little to no work involved), was ‘totally necessary for the building of 
bitcoin’. Wright said that he spoke to Adam Back, who proposed Hashcash in 
1997, ‘a few times in 2008, whilst setting up the first trials of the bitcoin protocol’. 


B-Money was invented by a man called Wei Dai. At the time of its creation, Wei 
wrote a paper which assumed ‘the existence of an untraceable network, where 
senders and receivers are identified only by digital pseudonyms (public keys) and 
every message is signed by its sender and encrypted to its receiver.’ The public 
key, or address, is matched, as John Lanchester handily described it in the LRB, to 
‘a private key which provides access to that address’. A key is really just a string of 
numbers and digits: the public key demonstrates ownership of any given address; 
the private key can only be used by the owner of that address. Wei went on to 
suggest a system for the exchange and transfer of money. ‘Anyone can create 
money by broadcasting the solution to a previously unsolved computational 
problem,’ he wrote. The system had methods for rewarding work and keeping users 
honest. ‘| admired B-Money,’ Wright told me, ‘and he definitely gave me some of the 
cryptographic code that ended up in the first version of bitcoin.’ Wright was always 
careful to give credit to those early developers. ‘Wei was very helpful,’ he went on, 
but ‘to people like that bitcoin seems a bit of a fudge. It works, but it’s not 
mathematically elegant.’ 


‘Wei said that?’ 


‘Wei was very polite. But others said it: Adam Back, Nick Szabo. They would 
probably like to find a more elegant solution to the problem. Perhaps they see the 
mining system in bitcoin as wasteful: there’s wasted computation in my system — 
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machines which are trying to solve problems and not winning. But that’s like 
society.’ 


‘Are these early cryptocurrency people in a state of rivalry?’ 
‘Yes, but it doesn’t matter.’ 
Kleiman 


The flat in Marylebone where | interviewed Wright had wooden shutters and modern 
ornaments and pictures, mainly of crows. | set the flat up for work while Craig and 
Ramona were in the City signing over his intellectual property, and all his 
companies, to MacGregor. They arrived at the flat a couple of hours late. ‘When did 
you realise the whole Satoshi thing wasn’t going to be a secret for ever?’ | asked. 


‘Very recently,’ Wright said. ‘I didn’t really believe it would need to come out. What 
we believed is that we could leave it in doubt — we wouldn't have to sign using the 
Satoshi keys or anything else. We have hundreds of patents and papers in progress 
— research from the beginning — and in the next year we're going to start releasing 
them. We thought people could suspect and people could query and we could leave 
it like that.’ 


‘And how did that change?’ 
Ramona said a single word: ‘Rob.’ 


The days in St Christopher Place were almost languorous. We would bring coffee 
back to the flat and spread out, and I’d try to build a picture of how he did what he 
said he did. We put up whiteboards and he bamboozled me with maths. Sometimes 
he would write at the board for hours, then tear open books and point to theories 
and proofs. | talked to the scientists he worked with, many of whom were better 
explainers than he was. One of the things | noticed was that Wright hated claiming 
outright to be Satoshi and would spend hours giving credit to everyone who had 
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ever contributed. It was odd: we were in the room because he was coming out as 
Satoshi, yet the claim embarrassed him and | have many hours of tape in which he 
deflects it. | felt this unwillingness supported his claim because it showed a proper 
regard for the communal nature of the work. He was contradictory enough 
sometimes to enjoy the limelight and actively court it, and this would cause trouble 
for him, but the idea of speaking directly as Satoshi seemed to fill him with dread. 
‘I’m afraid that they’re just going to look at my papers because I’ve got Satoshi after 
my name,’ he told me. ‘I’ve got my little Satoshi mask on, and people go “Aren’t you 
wonderful?” because you were Satoshi. | wanted the doubt. When | released future 
papers, | wanted people to go: “Oh, fuck, he could be, and these papers are so 
good he might be.” 


Dave Kleiman was to become the most important person in Wright’s professional 
life, the man he says helped him do Satoshi's work. They met online: they visited 
the same cryptography forums and had interacted since 2003. Both men were 
interested in cyber security, digital forensics and the future of money, but Kleiman 
was a boy’s boy, an army veteran who loved contact sports and fast living. Five foot 
ten and weighing 200 pounds, he lived in Riviera Beach, Florida, and from 1986 to 
1990 he was an army helicopter technician. When | looked into Kleiman’s life, | 
discovered he had also done computer forensics work for Homeland Security and 
the army. After active service he became a deputy in the Palm Beach County 
sheriff's office. A motorcycle crash in 1995, when he was 28, left him in a 
wheelchair. Kleiman was a drug user and one source told me he was heavily into 
online gambling and various illicit activities; there is evidence he was associated 
with Silk Road, the online marketplace for all things illegal. After the accident he 
devoted himself to computers, and set up a company called Computer Forensics 
LLC. 


Until Napster (the brainchild of a teenager called Shawn Fanning) came along in 
1999, enabling users to share music files across the internet without a central 
server, the phrase ‘peer-to-peer sharing’ was familiar only to the early internet's true 
believers. Napster, with its user-friendly interface, brought file-sharing to the 
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masses. The old model of copyright and revenue generation became obsolete 
overnight: people stopped buying CDs; young people got music through the internet 
for free. The music industry had to reinvent itself or die. Wright told me that his 
earliest conversations with Kleiman were about file-sharing. In 2007 they wrote a 
study guide together on hacking. ‘I used to fire ideas off him,’ Wright said. ‘I’m pretty 
good at maths but I’m not very good at people.’ Kleiman, he said, could put up with 
his temper, which not everybody could. They began to speak of ways to use the 
Napster idea in other areas and solve some old problems in cryptography. Wright 
never, | have to say, made it fully clear how they had collaborated on building 
bitcoin. | kept returning to the subject, and my doubts would flare up when he failed 
to be explicit. 


‘Give me a sense of how the idea of Satoshi formed,’ | said. 


‘| guess,’ Wright replied, ‘the initial idea was having a pseudonymous head that 
wouldn’t be cut off.’ 


‘More your idea than his?’ 
‘Probably mine.’ 
‘And was there a point you realised you needed a figurehead?’ | asked. 


‘We needed people to respond to us,’ he said. ‘But | didn’t really want people to 
respond to me. There are a couple of reasons for that. | don’t think | would really 
have sold the idea to anyone. If I’d come out originally as Satoshi without Dave, | 
don’t think it would have gone anywhere. I’ve had too many conversations with 
people who get annoyed because it’s me.’ 


‘The blockchain came about as an idea of a ledger,’ he said. ‘But there were a 
number of problems that needed to be solved. It needed to be distributed, but how 
do you make sure people don’t collude — it may seem awful but you don’t put trust in 
people, you incentivise people to act. And you incentivise people to act by giving 
them the opportunity to earn something. It’s as Adam Smith says: it’s not through 
the goodness of the heart, it’s not the baker caring about you, it’s not the butcher 
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caring about you, it’s them caring about their own families. Together, as he put it, 
the invisible hand controls the way society works.’ 


| asked him to explain the distributed ledger in layman’s terms and he went into an 
algorithmic paroxysm of verbal ingenuity. Ignoring all that, a distributed ledger is a 
database that is shared between multiple users, with every contributor to the 
network having their own identical copy of the database. Any and all additions or 
alterations to the ledger are mirrored in every copy as soon as they’re made. No 
central authority is in charge of it, but no entry on it can be disputed. Adam Smith’s 
point about ‘incentive’ is embedded in the way bitcoin works: people do not just buy 
coins or use them; they ‘mine’ them. Miners use their computers to solve 
increasingly difficult mathematical problems, the reward for the solving of which can 
be paid in bitcoin. This keeps the currency honest and, ideally, stops it from being 
dominated by any single entity. 


| had brought rolls of disposable whiteboard and stuck it up around the flat, and, 
while we were speaking, he would jump up and cover the walls in formulae, along 
with arrows, arcs and curves. His wife told me she sometimes goes into the shower 
room and finds him standing there, stark naked, writing on the steamed glass. ‘Was 
there a primary person doing the maths?’ | asked. 


‘Me,’ he said. ‘Dave wasn't really a mathematician. What he did was make me 
simplify it.’ 


‘How did he know how to make you simplify it?’ 


‘We got to a point in the writing of the Satoshi white paper where it was ... People 
say that it was hard.’ 


‘He wanted you to bring the language down a little bit?’ 


‘A lot. It’s very simple. The elliptical curve stuff is not described in the paper at all, 
it's just there. The crypto stuff isn’t described either.’ | asked him to show me the 
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trail of ideas that led to their collaboration. ‘So all these things are there,’ he said, 
pointing to a 337-page thesis on his computer called ‘The Quantification of 
Information Systems Risk’, which he had recently submitted in partial fulfilment of a 
philosophy doctorate at Charles Sturt University. ‘Application to audits, how you 
analyse failures, deriving the mathematics behind it, simplifying the mathematics 
and there you go ... The core of the bitcoin paper is a Poisson model based on 
binomial distribution. That’s how it got solved.’ 


In 2008 it was a ‘hodgepodge’, he said. | asked him if he felt the development of 
bitcoin was, at some level, a response to the financial crisis. ‘It was already in 
process. | saw [the crisis] coming though. It was a kind of perfect storm. During that 
year, | spoke to Wei Dai. So between him and Hal Finney there were a lot of really 
good ideas about making money work ... [Finney] was the one who actually took 
what | said seriously. He received the first bitcoin.’ 


Craig started turning up to our interviews in a three-piece suit. His suits were 
unfashionable and his ties even more so — 1970s-style yellow, sometimes paisley — 
and he would ramble on a range of subjects. On his own subject, he could be 
brilliant, but he was wayward: he would side-track, miss the point and never come 
back to it. He was nothing like people imagine the mythical Satoshi to be — in fact, 
he was Satoshi's comic opposite. He told stories against himself that weren't really 
against himself. He was obsessed with his opponents’ views but had no skill at 
providing a straight answer to their questions. ‘I’m an arsehole,’ he said many times, 
as if saying so were a major concession. But he wasn’t really, he was actually pretty 
nice. He was arrogant about maths and computing, which wasn’t so surprising. He 
also had a habit of dissembling, of now and then lying about small things in a way 
that cast shade on larger things. At one point, | asked him to send me an email from 
the original Satoshi account. 


‘Can you do that?’ | asked. 
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‘Yes,’ he said. ‘But I’d need Rob’s permission.’ When | asked MacGregor he said 
that was absurd. He simply didn’t want to — or couldn't — give too much away, and 
that was unfortunate in someone who'd agreed to sit down every day with a writer. 
He seemed to have full Knowledge of that email account, in a way that made it seem 
unquestionably his. But somehow, it offended his sense of personal power to prove 
it. At first, | thought he was a man in existential crisis, like the hero of Bellow’s 
Dangling Man, brilliant but antisocial, waiting to be drafted. But as the months 
passed | began to think of him more as a Russian ‘superfluous’ man of the 1850s, a 
romantic hero out of Turgenev, constantly held back from self-realisation by some 
blinding secret, showing himself not by action but in speech. Wright talked all day 
and he scribbled on the board and he called me his friend. He cried and he shouted 
and he unloaded his childhood and spoke about his father. He claimed to be 
Satoshi and he spoke Satoshi's thoughts and described what he did and gave an 
account of what people misunderstood about his invention and where bitcoin 
needed to go now. | moved to an office in Piccadilly — it was like something out of 
John le Carré, all those rooftops and fluttering Union Jacks — and we continued to 
do interviews. He talked without cease, without direction, and continued to find it 
difficult to land near the spot where my question was marked on the ground. When | 
asked to see the emails between him and Kleiman, he shrugged. He said he wasn't 
getting on well with his first wife when he wrote them and | assumed that meant they 
were full of talk about her. ‘Just edit them down for me,’ | said. 


‘| don’t know if | can find them,’ he said. But | wouldn’t let it go and eventually he 
sent me a selection and they certainly seem to be authentic. A few of the emails 
were obviously the same as those quoted in the Wired and Gizmodo stories before 
Christmas. Wright always said these stories had been provoked by a ‘leak’, the work 
of a disgruntled employee of his who had stolen a hard drive. In any case, the 
emails he sent me show a pair of men with shadowy habits — socially 
undernourished men, I’d say, with a high degree of intellectual ability — operating in 
a world where the line between inventing and scamming is not always clear. The 
first email Wright sent me was from 27 November 2007, when he was working for 
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the Sydney accountancy firm BDO Kendalls and the two men were working on a 
paper on ‘Cookies in Internet Banking’. ‘Next year Dave, we come out with 
something big. | will tell you, but not now,’ he wrote to Kleiman on 22 December 
2007. Kleiman’s reply told him what he was reading — ‘Sagan, Feynman, Einstein’ — 
and added: ‘Il hope we make an event together this year so we can “break some 
bread” and have a casual conversation, instead of the brain dump middle of the 
night email exchanges we normally have.’ On 1 January 2008, Wright closed an 
email: ‘Nothing now, but | want your help on something big soon.’ 


The subject of bitcoin came up — quite starkly — in an email from Wright dated 12 
March 2008. ‘I need your help editing a paper | am going to release later this year. | 
have been working on a new form of electronic money. Bit cash, bitcoin ... you are 
always there for me Dave. | want you to be part of it all. | cannot release it as me. 
GMX, vistomail and Tor. | need your help and | need a version of me to make this 
work that is better than me.’ Wright told me that he did the coding and that Kleiman 
helped him to write the white paper and make the language ‘serene’. With a protocol 
as Clever as the one underlying bitcoin, you would imagine the work was complex 
and endlessly discussed. But Wright says they mainly talked about it by direct 
message and by phone. Wright had been fired from his job at BDO (the crash was 
taking effect) and had retired with his then wife, Lynn, and many computers to a 
farm in Port Macquarie. It was there, Wright says, that he did the majority of the 
work on bitcoin and where he spoke to Kleiman most regularly. The Satoshi white 
paper, ‘Bitcoin: A Peer-to-Peer Electronic Cash System’, was published on a 
cryptography mailing list on 31 October 2008. 


On 27 December 2008, Wright wrote to Kleiman: ‘My wife will not be happy, but | 
am not going back to work. | need time to get my idea going ... The presentation 
was good and the paper is out. | am already getting shit from people and attacks on 
what we did. The bloody bastards are wrong and | friken showed it, they should 
stick to the science and piss off with their politicised crap. | need your help. You 
edited my paper and now | need to have you aid me build this idea.’ Wright told me 
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that it took several attempts to get the protocol up and running. He began to test it 
early in January 2009. ‘That was where the real money started rolling in,’ he told 
me. The originating block in the blockchain — the file that provably records every 
transaction ever made — is called the Genesis block. ‘There were actually a few 
versions of the Genesis block,’ Wright told me. ‘It fucked up a few times and we 
reviewed it a few times. The Genesis block is the one that didn’t crash.’ There from 
the beginning was Hal Finney, who would receive the first bitcoin transaction, on 
block 9. This was a key moment for the new cryptocurrency: block 9 for ever shows 
that Satoshi sent Finney ten bitcoin on 12 January 2009 — it is the first outgoing 
transaction we know to have come from Satoshi. Satoshi also sent four other 
transactions on the same day. | asked Wright who the recipients were — who the 
four addresses belonged to. ‘Hal, Dave, myself,’ he replied. ‘And another | cannot 
name as | have no right to do so.’ Wright told me that around this time he was in 
correspondence with Wei Dai, with Gavin Andresen, who would go on to lead the 
development of bitcoin, and Mike Hearn, a Google engineer who had ideas about 
the direction bitcoin should take. Yet when | asked for copies of the emails between 
Satoshi and these men he said they had been wiped when he was running from the 
ATO. It seemed odd, and still does, that some emails were lost while others were 
not. | think he believed it would be more interesting to play hide and seek than to be 
a man with a knowable past. 


Wright’s emails to Kleiman suggest that by this point he was starting to mine the 
million or so bitcoins that are said to be owned by Satoshi Nakamoto. ‘Il have a few 
potential clients in gaming and banking,’ he wrote to Kleiman. ‘I figure | can work ten 
to 15 hours a week and pretend to have a consultancy and use this to build and buy 
the machines | need. If | automate the code and monitoring, | can double the 
productivity and still offer more than others are doing ... The racks are in place in 
Bagnoo and Lisarow. | figure we can have 100 cores a month setup and get to 
around 500.’ Kleiman replied the same day to affirm their vows. 
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‘Craig, you always know | am there for you. You changed the paradigm that was 
held for over a decade and destroyed the work of a couple [sic] academics. Do you 
really think they will just take this happily? | know you will not, but try not to take the 
comments to heart. Let the paper speak for itself. Next time you need to get me a 
copy of the conference proceedings as well. You know it is not easy for me to 
travel.’ A picture emerges of an ailing Kleiman sitting at his computer day and night 
in his small ranch-style house in Riviera Beach, Florida. After writing this last email, 
he spent a frighteningly long period in hospital. The two men agreed to meet up ata 
conference in Florida on 11 March 2009 and Kleiman wrote expressing his 
excitement at the prospect of a few beers with Wright. Craig and Lynn stayed at 
Disney’s Coronado Springs Resort Hotel and Kleiman drove there in his customised 
van, rolling into the bar with a big smile: Kleiman was the brother and drinking 
buddy and like-minded computer nerd Wright had never had. Not even Lynn had a 
clue what they were talking about. 


During my visit to Australia | met Lynn in Chatswood, on Sydney’s north shore, a 
busy commercial district that heaves with eager shoppers on a Saturday morning. 
She had met Wright on the internet while she was working as the nursing manager 
of the ICU in a military hospital in Ottawa. She told me Wright asked her to marry 
him about six weeks after they met online. When she eventually went to Sydney to 
visit him, he brought a ring to the airport. ‘He was 26 and | was 44,’ she said. 
Neither of them had been married before. 


‘He was very mature for 26,’ Lynn told me. ‘He always has to be the best. And the 
hard part about that is he left bodies by the wayside. He stepped on people.’ She 
began working for him — ‘he was the geek and | was the gofer’ — and he got a lot of 
work in information security, working for the Australian Securities Exchange, and 
Centrebet, which is where he first got to know Stefan Matthews. Wright told me he 
was afraid some of the things he did for those online betting companies would come 
back to bite him, if and when he was outed as Satoshi. Other sources told me that 
he and Kleiman had had some involvement with illegal gambling. ‘| knew Dave 
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Kleiman and he were working together,’ Lynn told me, ‘and | remember them saying 
that digital money was the way of the future. I’ve never said this to anybody, but | 
knew he was working on it and | didn’t ask, because | knew he would bite my head 
off if | didn’t understand it. He’s got a very sociopathic personality.’ 


Lynn said her husband had admired Kleiman. And she admired him too: ‘He loved 
life,’ she said, ‘and he had a brilliant mind, like Craig, but he had a gentler soul.’ She 
remembered the Orlando conference. ‘We stayed in a hotel that looked like a giant 
cartoon,’ she told me. ‘We met in one of the bars. He was a young guy, in his thirties 
or early forties, brown hair and moustache, average-looking. And boy, he loved to 
have a good time. It might have been his birthday. | went into the Disney store and 
bought some hats — Craig had Pluto, and Dave had one in the shape of a giant 
birthday cake.’ Wright stepped out of himself for Kleiman: ‘I'd never seen him like 
that with anybody. It was like, “I wanna grow up to be just like him.” Dave softened 
Craig. A lot of what they wrote together was in his voice. I’d never seen Craig react 
like that to anybody. When he felt unsure of himself he went and talked to Dave. | 
think he wanted to be like Dave, but he knew he couldn't be.’ 


‘In terms of having that kind of temperament?’ 


‘Yeah. Dave was good for him. It made him realise that life doesn’t go your way all 
of the time.’ 


| asked her if she thought he was a flawed person. ‘Yes,’ she said. ‘He’s starting to 
realise it. He Knows he’s done well in his work but he hasn't done well as a human 
being.’ She stared into her cup. ‘When we were at the farm,’ she said, ‘] was 
interested in finding four-leaf clovers. | would never find any, but Craig would just 
step out of the house and find three.’ 


In mid-2011 Satoshi suddenly disappeared from view. Apart from one or two emails 
denouncing fake Satoshis, he wasn’t heard from again. Control of the network alert 
key is said to have been passed at this time to Andresen — possession of this key 
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makes its holder the closest thing bitcoin has to a chief. Wright sent Kleiman an 
email on 10 September 2011: ‘It is recorded. | cannot do the Satoshi bit any more. 
They no longer listen. | am better as a myth. Back to my lectures and rants that 
everyone ignores as me. | hate this Dave, my pseudonym is more popular than | 
can ever hope to be.’ 


For some reason — possibly fear of the ATO — Wright set up a trust fund called the 
Tulip Trust in June 2011, and asked Kleiman to sign an agreement stating that he, 
Kleiman, would hold 1,100,111 bitcoin (then valued at £100,000, currently worth 
around $800 million). For clarity: there is no evidence that Kleiman ever took 
custody of that amount. However, there was a separate agreement that Kleiman 
would receive 350,000 bitcoin and this transaction was made. ‘All bitcoin will be 
returned to Dr right on 1 January 2020,’ it says in the trust document. 


No record of this arrangement will be made public at any time ... Dr Wright MAY request 
a loan of bitcoin for the following reasons (and no others): Furthering research into peer 
to peer systems ... commercial activities that enhance the value and position of bitcoin. In 
all events, all transactions in loaned funds will be concluded outside of Australia and the 
USA until and unless a clear and acceptable path to the recognition of bitcoin as currency 
has occurred ... | lastly acknowledge that | will not divulge the identity of the Key with ID 
C941FE6D nor of the origins of the satoshin@gmx.com email. 


Kleiman signed it. ‘I think you are mad and this is risky,’ he wrote in an email to 
Wright on 24 June 2011, perhaps spying a possible illegality. ‘But | believe in what 
we are trying to do.’ Wright meanwhile seemed to get more and more frustrated. He 
both wanted fame and repudiated it, craving the recognition he felt was his due 
while claiming his only wish was to get back to his desk. ‘| have people who love my 
secret identity and hate me,’ he wrote to Kleiman on 23 October that year. ‘Il have 
hundreds of papers. Satoshi has one. Nothing, just one bloody paper and | cannot 
associate myself with ME! | am tired of all these dicks Dave. Tired of academic 
attacks. Tired of tax fuckwits. Tired of having to do shenanigans like moving stuff 
overseas IN CASE it works.’ 
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| came to feel that there were secrets between Wright and Kleiman that might never 
be revealed. Wright usually clammed up when asked about Kleiman and money. 
One day, in a fit of high spirits, he showed me a piece of software he said that US 
Homeland Security had ripped off from him and Kleiman. He smiled when | asked if 
they'd done government security work. The first thing most people ask about when 
you mention Satoshi is his alleged hoard of bitcoin: he invented the thing, and 
created the Genesis block, and mined bitcoin from the start, so where was Wright’s 
money and where was Kleiman’s? The emails, when | got them, seemed to clear 
this up slightly, but, during many dozens of hours of conversation with Wright, he 
never properly told me how many bitcoin he mined. | was aware — and he knew | 
was aware, because | told him several times — that he wasn't giving me a full 
account of everything that had occurred between him and Kleiman. He said it was 
complicated. 


Somewhat more helpful are minutes taken during a meeting between the ATO and 
representatives from Wright's Australian companies in Sydney on 26 February 
2014. According to the minutes, Wright's representative John Cheshire went into 
detail about the financial collaboration between Wright and Kleiman. This was a 
story that Wright, for some reason, didn’t want to tell me. Cheshire said that Wright 
and Kleiman had set up a company called W&K Info Defense LLC (W&k), ‘an entity 
created for the purpose of mining bitcoins’. Some of these bitcoins were put into a 
Seychelles trust and some into one in Singapore. Wright, according to Cheshire, 
‘had gotten approximately 1.1 million bitcoins. There was a point in time when he 
had around 10 per cent of all the bitcoins out there. Mr Kleiman would have had a 
similar amount.’ 


| asked Wright about this and he told me it was true that his and Kleiman’s mining 
activity had led to a complicated trust. The trust question was persistently vague: 
not only how many trusts but the names of the trustees, and the dates of their 
formation. The only consistent thing is the amount of bitcoin Wright is said to have 
had at one time, 1.1 million. He said that his bitcoin could not now be moved without 
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the agreement of the (several) trustees. He also said that Kleiman had been given 
350,000 bitcoin but had not moved them. He kept them on a personal hard drive. 


Wright also set up a shell company in the UK. ‘Il know what you want and | know 
how impatient you can be,’ Kleiman wrote on 10 December 2012, ‘but really, we 
need to do this right. If you fail you can start again. That is the real beauty of what 
you have.’ It’s possible Kleiman was referring to their ability to mine bitcoins and 
then squirrel them away. But he was evidently worried about Wright's ability to cope 
with all the flak, and about Wright’s kamikaze attitude to the tax authorities. ‘I love 
you like a brother Craig,’ he added, ‘but you are a really difficult person to be close 
to. You need people. Stop pushing them away. You have over one million bitcoin 
now in the trust. Start doing something for yourself and this family you have.’ 


Around this time, an 18-year-old IT enthusiast called Uyen Nguyen began working 
with them. Very quickly, Kleiman made her a co-director of their company and she 
later became a powerful figure in the trust. It's unclear how such a young and 
inexperienced person came to have so much influence. Wright told me she was 
‘volatile, capricious and beyond control’ and added that Kleiman liked young women 
and that she was loyal and trusted — but that ‘she wants to help and this always 
leads to trouble.’ While | was preparing this story, Wright began to seem worried 
about Nguyen. | always felt he was in the middle of a very complicated lie when he 
talked about her. ‘My way of lying,’ he told me one day, ‘is to let you believe 
something. If you stop questioning and then you go off, and | don't correct you — 
that’s my lie.’ 


Towards the end of 2012, Dave began to fail. ‘Paraplegics get sick a lot,’ Lynn 





Wright had told me, speaking as a nurse. ‘The bedsores get bad and they can’t fight 
infections. Dave was in and out of hospital a lot and | don’t know what his life was 
really like.’ Wright told me that Kleiman had girlfriends, but admitted he didn’t really 
know much about his life. Like Wright and his first wife, they had met in a chatroom. 
They met in the flesh no more than half a dozen times. Kleiman seems to have lived 
in front of his computer day and night, and the sicker he got the more isolated he 
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seemed to be. Just after 6 p.m. on 27 April 2013 he was found dead by a friend 
who'd been trying to contact him for several days. He was sitting in his wheelchair 
and leaning to the left with his head resting on his hand. Lying next to him on the 
bed was a 0.45 calibre semi-automatic handgun, a bottle of whisky and a loaded 
magazine of bullets. In the mattress a few feet from where he sat, a bullet hole was 
found, but Kleiman had died from coronary heart disease. There were prescription 
medicines in his bloodstream and a modest amount of cocaine. 


9 


‘We never really thought that “we made Satoshi,” Wright told me once. ‘It was good. 


It was done. It was cool. But | don’t think we realised how big it would be.’ 


‘There was no conversation between you about how it was going over? That 
Satoshi was becoming a guru?’ 


‘We thought it was funny.’ 


Wright paused, shook his head, and broke down. ‘I loved Dave,’ he said. ‘] would 
have seen him more. | would have talked to him more. | would've made sure he had 
some fucking money to go to a decent hospital. | don’t think he had the right to 
choose not to tell me.’ 


‘What was happening to him?’ 


‘Neither of us had any money, physical money. We had money in Liberty, an 
exchange in Costa Rica, but the Americans closed it down as a money-laundering 
operation. Dave had a number of bitcoins on the hard drive he carried with him. 
Probably about 350,000.’ 


‘Hoping it would ...’ 


‘As | said, it wasn’t worth that much then. Dave died a week before the value went 
up by 25 times.’ Wright kept wiping his eyes and shaking his head. He emphasised 
something he said the commentators never understood: for a long time, bitcoin 
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wasn’t worth anything, and they constantly needed money to keep the whole 
operation going. They feared that dumping their bitcoin hoard would have flooded 
the market and devalued the currency. One of the things Wright and Kleiman had in 
common is that they had a problem turning their ideas into cash and were always 
being chased by creditors. Kleiman died feeling like a failure. No one in his family 
has the passwords to release the bitcoins on his computer. After he died, his family 
didn’t open probate on his estate because they believed it had no value. Kleiman’s 
supposed personal bitcoin holdings are worth $260 million at today’s prices. 


The London Office 


In January this year, on a rainy London afternoon, Wright took me to see the large 
office that was being set up for him as part of the deal with nCrypt. It hadn’t taken 
long for the world to forget that they’d once thought Wright was Satoshi. One or two 
of the media organisations that had ‘outed’ him in December had taken down the 
original articles from their websites, stung by the cries of fraud. After only a few 
days’ interest in the notion, most people had made up their minds that Wright had 
nothing to do with Satoshi. Wright — under strict advisement — had said nothing in 
response to the media reports accusing him of perpetrating a hoax, but when we 
were alone, which was most of the time, he would launch into point-by-point 
rebuttals of what his critics had been saying. In the end he would shrug, as if the 
most obscure things were actually obvious. 


The press coverage of Wright and Wright himself had something in common: they 
succeeded in making him seem less plausible than he actually was, and, to me, that 
is a general truth about computer geeks. They are content to know what they know 
and not to explain it. They will answer a straightforward slur with an algorithm, or fail 
to claim credit for something big then spend all night trying to claim credit for 
something small. Many of the accusations of lying that were thrown at Wright last 
December were thrown by other coders. And that’s what they’re like — see Reddit, 
or any of the bitcoin forums. Much of what these people do they do in the dark, 
beyond scrutiny, and, just as it’s against their nature to incriminate themselves, it is 
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equally unnatural for them, even under pressure, to de-incriminate themselves. 
They just shrug. 


Coders call one another liars, when all they really mean is that they disagree about 
how software should work. During the time | was working with Wright in secret, | 
would text my colleague John Lanchester, who | knew | could trust to keep the 
secret but also to understand what was at stake in the story. ‘Imagine a situation,’ | 
wrote to John, ‘where novelists were strangely invested in denying the plausibility of 
each other’s books. There’s no “proof” as such that one is right and the other is 
wrong, but they could argue fiercely and accuse each other of all sorts of things 
while not really settling the problem.’ 


‘Edmund Wilson says somewhere that the reason poets dislike each other's books 
is because they seem wrong, false — a kind of lie,’ John replied. ‘If you were telling 
the truth you would be writing the same poems as me.’ 


So the world that Wright knew best thought he was a liar. And the day we visited his 
new offices he seemed resigned to the fact. Much later, he told me that these 
months were the high-point of his career in computer science: he was working in 
secret on material that seemed to be coming together beautifully and profitably. It 
irked him that people called him a fraud and it irked him, just as much, that his deal 
with nCrypt would require him to prove that he was Satoshi. He hated being 
accused of being a fraud and he hated having to prove that he wasn’t a fraud. 
Having it both ways is a life, a life that requires a certain courage as well as 
shamelessness, and Wright was living his double life to the hilt. 


Wright introduced me to Allan Pedersen, who'd been his project manager in 
Sydney. We were in the Workshop — a floor above MacGregor’s office near Oxford 
Circus — standing at a glass workbench beside a whiteboard covered in writing. The 
opposite wall was stencilled with a quote from Henry Ford: ‘Whether you think you 
can or think you can’t, you are right.’ Pedersen told me he had been brought over to 
direct a group preparing an initial batch of 32 patent applications, to be completed 
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by April. (This was in January.) Beyond that there were ‘upwards of four hundred 
patents’, ideas to do with using the blockchain to set up contracts that would come 
into action on specified dates years ahead, or using the blockchain to allow cars to 
tell their owners when they needed petrol and to debit the cost when they refuelled. 
At this point, and for several minutes afterwards, Wright spoke of himself in the third 
person. ‘Craig has been given a big kick up the bum,’ he said, ‘because Craig, 
instead of doing tons of research and sticking it on a shelf, has to complete it and 
turn it into something.’ 


‘How do you organise him?’ | asked Pedersen. 


‘I’m the organised type,’ he said. ‘When Craig comes into the office he’s always in 
the middle of a sentence. And I’m trying to work out what this sentence is and 
manage things around what he’s saying. I’m sort of grounding his latest thoughts, 
placing them in what we're trying to do. I’m the glue between Craig and the 
developers.’ 


It had become obvious, mainly from things Wright himself had said, that he often 
found it difficult to get on with people who worked for him. He got rattled when they 
said things couldn’t be done, or were too conventional in their thinking, or too stupid, 
as he saw it. Ramona told me that 40 per cent of his staff in Sydney had been ina 
state of rebellion. ‘I’m an arsehole, Craig said to me once again, ‘and | know that.’ 
Pedersen had the job of keeping things cool with the developers, whose job it was 
to turn Wright’s ideas into a form in which they could be patented and eventually 
licensed. ‘I’m making sure the ideas get executed,’ he said. ‘Craig’s not that 
interested in that part. He’s always moving on.’ 


‘Craig’s great at research,’ Wright said, ‘but his development and commercialisation 
sucks. | build it, and then it works, and then | walk off.’ 


‘You're losing interest?’ 
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‘I’ve lost interest. I’ve proved it, and off | go.’ 


‘It's getting easier,’ Pedersen said, with a smile. ‘It was quite complex in the 
beginning.’ Wright had strong views about how the technology should develop, and 
how it could ‘scale’ to meet greater demand. ‘It can go to any size,’ Wright said that 
day. I’ve tested up to 340 gigabyte blocks, which is hundreds of thousands of times 
greater than it is now. It’s every stock exchange, it’s every registry rolled into one ... 
Ultimately bitcoin is a 1980s program, because that’s what | was trained in ... The 
idea is good, the code is robust, it runs and does the job, but it’s slow and 
cumbersome. There were some things early on that needed to be fixed and were, 
but it wasn’t as perfect as everyone thinks. At the end of the day, it needs to be 
turned into professional code. It needs to move away from the home user network 
and into a server network environment. And then it can do much more and be 
faster.’ There are those who feel it should remain small, and that making it bigger is 
a betrayal of its first principles. 


‘This is the future of the blockchain,’ Pedersen said. 


‘People are saying, “It’s not really something we can run yet,” Wright said, ‘but it’s 
time that we grew up and that bitcoin becomes professional.’ 


Pedersen shook his head. ‘We’re not working in a world where we know exactly 
what we’re doing,’ he said. ‘It's coming from Craig. And then | start establishing the 
ground rules and we begin rolling it out. I’m putting people on a certain track and | 
keep going back to Craig, saying, “We need to sort this or that out,” and I’m 
constantly keeping them and him in the loop. The good thing about Craig is that he 
wants me to task him, so it’s a very strange relationship we've got. I’m reporting to 
him but I’m tasking him at the same time and it seems to work beautifully.’ He was 
tired, and so was the whole team, but they felt confident the patent applications 
would be filed on time. 
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When Craig left the room to take a phone call, Pedersen took pains to close the 
door properly. ‘He’s a really nice person,’ he said, ‘but he’s a fucking nightmare. 
Every single morning he comes in and | think, “What is he talking about?”’ Pedersen 
told me how he handled him, how he made him focus, and how he worked hard to 
keep him on track. ‘When I’ve got new people here,’ he said, and there were many 
new people, ‘I have to train them how to talk to Craig. That’s what | have to do. 
Sometimes, he can’t explain things and this is where the anger comes from. It’s the 
interesting part. You can’t be in the same room with him. He’s constantly telling you 
something. He’s like Steve Jobs, you know — only worse.’ 


As we made our way to the new office — it was a building site that day, but would be 
up and running four weeks later — Wright presented himself as a man who was 
ready for anything. In a pinstripe suit and ruby tie, he looked like a hellbent 1980s 
bond dealer, except the cypherpunk glint in the eye suggested he was getting away 
with something. He wasn’t the king of all he surveyed, he was the joker, and, 
crossing Oxford Street, he joked that he might be Moses. The traffic parted and he 
made his way to the promised land, a brand new suite of offices down a side street. 


* 


Pedersen had come along. ‘This is how it works in this company,’ he said. “You’re 
sitting in Vancouver in October’ — Vancouver is where nTrust, the parent company, 
is based — ‘and suddenly Rob MacGregor says: “We need these thirty-odd patents 
by April and when can you go to London?” The hurry for the patents was to help 
with the giant sale to Google or whomever. The men behind the deal were very 
keen to beat other blockchain developers to the punch, especially the R3 
consortium of banks and financial institutions which late last year started spending a 
fortune trying to deploy the technology. We were accompanied by a young Irish 
woman who had been put in charge of designing the new office. MacGregor’s firm 
had invested millions in Wright. The new company, nCrypt, had pretty much been 
built around him, and its offices showed it. He was to have the enormous corner 
office with a view all the way along Oxford Street. MacGregor clearly believed in 
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Wright, however obnoxious he could be, but | never understood why he wasn't 
interrogating his uncertainties before spending his money. He was a lawyer, but he 
put trust in front of diligence, which is unusual in someone so intelligent. MacGregor 
never, incidentally, used the words ‘off the record’ with me — only once, later on, did 
he imply it, when he said something and then said he’d deny saying it if | quoted him 
— and he was a generous source of information. At no point, however, did he tell me 
where the money for this project was coming from. 


The designer was waving a colour swatch. ‘We've gone for a kind of Scandi look,’ 
she said. 


‘This place will work,’ Wright said, striding through the open space, ‘mainly when it 
comes to protecting me from myself.’ Amid the hammering and drilling, Wright stood 
in an office about 20 feet by 20 feet, with floor to ceiling windows and a view down 
into the heart of Soho. 


‘You remember J.R. Ewing in Dallas?’ | asked. 


Wright laughed. What he most enjoyed, he said, was that all this was going on in 
secret while the world outside had written him off as a mug and a fantasist. ‘If 
Satoshi has to come out, he'll come out in style.’ He turned back to the designer to 
tell her how the frosted glass should work in the meeting room. ‘We do a lot of work 
on whiteboards,’ he said. He pursed his lips, then smiled. ‘Will the interactive 
whiteboards be set up so that | can contact the guys in Sydney?’ 


We spent an hour at the new office. ‘And they say nothing is going on,’ Wright said 
as we stepped back into the elevator. ‘It’s all a figment of our imagination. \’m not 
Satoshi, and none of this is real.’ Out on the street again, he told me he had all the 
money he would ever need. ‘And I'll have the monkeys off my back for ever and just 
get on with the one thing I’m good at, not business, not managing people, but doing 
research and honouring this thing we made.’ Wright was enjoying himself, but 
nCrypt was already, as MacGregor told me repeatedly, negotiating the sale of the 
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whole package to the highest bidder: “Buy in, sell out, make some zeroes,’ as he 
had said, and he’d always been honest about that goal. Wright wasn’t facing up to 
this. The next time | visited his corner office it was finished and decked out with 
Claret-red leather armchairs and sofas flown in from Sydney. It looked, as I’d joked 
earlier, like the office of a Texan oil magnate. A host of management certificates 
were framed on the wall next to a signed photograph of Muhammad Ali. 


| told Pedersen | thought Wright was struggling with the fine print of the deal — 
coming out. ‘He’s sold his soul,’ Pedersen said. ‘That’s how simple this is. And the 
combination of Craig and Ramona is dangerous here. They can’t just sign all these 
[legal] papers and think it’s going to be all right, that they’ll sort something out. It 
doesn’t work that way. They now have to go to the end and live with it. But they’re 
doing it on first class. When this Satoshi thing comes out | can see a lot of bad 
things happening, and they are not geared up for this, any of them.’ 


‘’m concerned for him,’ | said. 
‘There’s not really a happy ending here,’ Pedersen said. 
‘Was it the same in Australia?’ 


‘It was the exact same,’ he said, ‘except in Australia you could say he was in 
control. He’s learned absolutely nothing. He’s now in this box, he can’t move, he 
can’t do anything, and this box is getting smaller and smaller.’ 


‘Do you think he wants to be outed as Satoshi?’ 


‘Yes | do. It’s in in his personality. He wants to be recognised. He says too much. 
After two weeks of working with him, | knew.’ 


‘He and Ramona tell me they had a pact never to come out.’ 
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‘My feeling is that she doesn’t want him to come out, but he does. He’s been 
pushing for this to happen.’ 


| spoke to one of the scientists, a shy, unexcitable man in his late fifties, who has 
been working on this technology for several years. He and Pedersen are old-school 
IT people, quiet-spoken and completely uninterested in the limelight. Both of them 
thought Wright was working at a different level from everybody else. The scientist, 
who spoke to me from the beginning on condition that he wouldn't be named, 
worried about Wright's attention to detail and about his conspiratorial nature, but he 
had no doubts about Wright’s command of the big picture. The scientist was helping 
to oversee all the white papers and patent applications and managing a large team 
of IT specialists and mathematicians. | asked him if he was worried about the R3 
consortium’s work on blockchain technology. ‘They are going to fail,’ he said. ‘They 
don’t have Satoshi. There is a panic out there, a misunderstanding about how the 
blockchain and bitcoin works. They hire people who know about bitcoin and are 
attempting to buy into it rather than being left behind. I’ve read some patent 
applications that are pending, applied for by the Bank of America. What | saw was 
ultimately unimpressive in comparison to what Craig is trying to do with the 
blockchain.’ 


The scientist described how the staff try to get the ideas out of Wright’s head. “You 
can’t say: “Explain this to me.” If you ask a question like that, he'll just go off on 
giant tangents. First, he’ll have difficulty explaining what’s in his head. Often he’s 
just coming up with ideas on the spot that he'll throw into conversation. You want to 
try to get yes and no answers from him. We film him at the whiteboard and 
someone will type out the text.’ 


He described moments when everyone in the research team thought what Wright 
was saying was impossible. It couldn’t be done, the software wasn’t up to it, the 
blockchain couldn't scale to the task, and then suddenly everyone would understand 
what he was saying and appreciate its originality. ‘| need to be able to go over what 
he’s said,’ the scientist told me, ‘to find the pearls of wisdom and find out what the 
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hell he means. If | don’t get it then | might have to make some guesses. | had to 
train my team to work in that mode. They have to be good researchers. They have 
to understand the technology as well as be able to work with it.’ 


Often, the scientist said, the staff were amazed by an unexpected turn in Wright's 
thinking. But he admitted to being amazed, too, by certain gaps in Wright's technical 
knowledge. It was bizarre. Wright had what the scientist and the team regarded as 
vast experience and command of the blockchain, which he spoke of as his invention 
and appeared to know inside out, but then he would file a piece of maths that didn’t 
work. Or he would show a lack of detailed knowledge of something the team took 
for granted. Nobody | spoke to could explain this discrepancy. ‘One of the problems 
with him is that he’s a terrible communicator,’ the scientist said. ‘He’s invented this 
beautiful thing — the internet of value. But sometimes he'll just talk in equations but 
can't or is unwilling to explain their content and application.’ His mistakes could also, 
he implied, be a result of laziness and lack of attention to detail. 


| knew this for myself, but | was, to some extent, vexed that the technologists had 
the same experience. At the same time, | was impressed that people like the 
scientist and Pedersen could live with such a high degree of ambivalence about 
their boss. When | asked Pedersen if he thought the work was truly revolutionary, a 
non-native weariness came into his blue eyes. ‘I think so,’ he said. ‘But | don’t think 
he'll get the Nobel Prize because he’s too political. He’s coming out as a street 
fighter and could end up in prison or whatever.’ 


* 


The main players in this story were keen to help me, to talk about what they knew 
and to show me the documents, but, in every case, there were topics they would 
avoid, and that were never cleared up. One of the most helpful individuals was 
Stefan Matthews. He pointed me in the direction of people from Wright’s personal 
life, and sent me a typed history of his association with the man who would be 
Satoshi. Matthews noted that, when he signed the deal with MacGregor, Wright 
didn’t have a feasible business plan for any of his companies. The Wrights’ financial 
situation was dire. They couldn't pay their staff and a number had already left. 
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Pedersen and some others had stayed on without pay; Wright owed his lawyers $1 
million. Superannuation remittances were overdue and loan repayments unpaid; the 
companies needed £200,000 just to make it to next week. Craig and Ramona had 
sold their cars. One of the companies was already in administration and, with the 
ATO closing in, ‘all related entities were on the brink of collapse.’ Before signing the 
deal, MacGregor, sources say, tried to assess the value of Wright’s research, 
commissioning a ‘high-level overview’ of the companies. MacGregor instructed 
Matthews to be in Sydney on 24 June 2015, when a final appraisal of the 
businesses was undertaken and a draft arrangement negotiated for nTrust ‘to 
acquire the intellectual property and the companies themselves’. 


One night | went to have dinner with Matthews on my own. We met in the restaurant 
at the back of Fortnum & Mason, 92 Jermyn Street, and he seemed incongruous 
among the red banquettes — a large, bald Australian with a rough laugh and wearing 
a plaid shirt, keen to tell me everything he thought useful. Matthews seemed a much 
more affable character than MacGregor, both upfront and very loyal, without 
perhaps seeing how the two might cancel each other out. One of the tasks of the 
eager businessman is to make himself more sure of his own position, and Matthews 
spent a lot of time, as did MacGregor, selling the idea of Wright as Satoshi rather 
than investigating it. They drafted me into telling the world who Wright was, but they 
didn’t really know for sure themselves, and at one point their seeming haste 
threatened to drive a wedge between us. It seemed odd that they would ask a writer 
to celebrate a truth without first providing overwhelming evidence that the truth was 
true. | took it in my stride, most of the time, and enjoyed the doubts, while hoping for 
Clarity. 


Matthews drank a little wine but not much. He was talking about the night in Sydney 
when they signed the deal. ‘We pulled up outside Rob’s hotel. He said: “Do you 
realise what you have just done? You have just done the deal of a career. This is a 
billion dollar deal. Fucking more. Billion dollars plus.” 


‘Why is Rob so convinced?’ 
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‘Don't know, don’t know.’ (MacGregor later told me he was convinced because 
Wright had shown Matthews the draft Satoshi white paper. ‘| always had that,’ 
MacGregor said.) ‘If it turns out that he’s a fraud, | don’t know how he’s managed to 
do it because you couldn't make this up.’ 


Matthews told me about a meeting at the Bondi Iceberg Club in Sydney that Wright 
had with Ross Ulbricht, the founder of Silk Road, now serving two life sentences. 
Silk Road used bitcoin to trade all kinds of contraband items because the 
transactions could be made anonymously. Wright later confirmed that this meeting 
took place, but said only that Ulbricht was full of himself and they didn’t discuss 
bitcoin. Matthews seemed to think this was unlikely. He wondered whether Kleiman 
had had more to do with Ulbricht; other sources suggested the same. 


‘Wright signed a deal to come out as Satoshi,’ | said to Matthews. ‘Does he realise 
everything that involves?’ 


‘You're gonna have criminal groups that paid him lots of money and there are 
people who know about that,’ Matthews alleged. ‘If they quack? You’ve got Ross 
Ulbricht who’s in prison and apparently going to appeal trial this year or next. What 
happens when Ross sees Satoshi’s name splashed everywhere and Craig’s name 
everywhere? Is he going to say “I had lunch with that guy. We made a deal”? I’m not 
worried about what Craig has done, | worry about people who have associated with 
him.’ It was very strange to do an interview with someone who would come out with 
this stuff, given that he was also trying to market the guy. In fairness to Wright, 
Matthews might just have been running his mouth off, and I’ve left out the worst of 
what he said, now and later. 


We talked about some of the difficulties that had arisen between Wright and 
MacGregor. ‘Craig and Ramona are in a state about the keys leaving the room,’ | 
said. ‘He feels it is an act of self-annihilation to let them go. Rob has a Hollywood 
ending in mind and it’s looking incredibly unlikely. You can’t go into a marketplace 
Claiming full legitimacy when the proof hasn’t been produced.’ | told Matthews that 
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there were emails still missing between Wright and Kleiman, emails that the public 
would want to see before accepting him as Satoshi, because the correspondence 
would presumably go into the kind of detail about the invention that only the 
inventors could know. Wright had told me he would produce the missing emails by 
the following Wednesday, but he never did. 


‘| know what’s in there,’ Matthews told me. ‘It will be chatter to do with illegal stuff 
that he and Dave were doing in Costa Rica — particularly around Costa Rican 
casinos where they got $23 million of income. And you don’t get paid that amount 
just for doing a security review ... He mined all those bitcoins himself using 
equipment that he bought with money that he got from Costa Rica.’ Again: why was 
Matthews saying this? It was obvious to me that Wright was going to have a 
problem telling the full story, whatever it was. | wasn’t even sure he'd told the full 
story to his wife, but perhaps he had, because she referred, several times, to the 
fact that there were things that she just couldn’t tell me. ‘They'll come after us,’ she 
said, in a state of high emotion. ‘They'll destroy us.’ Matthews said he didn’t know 
what that was about. He did tell me something he said he had told MacGregor when 
MacGregor asked him what he was getting out of the deal. ‘Absolutely nothing,’ 
Matthews said. ‘| get what | get paid by Calvin. Calvin is the only allegiance | have, 
then and now.’ 


Calvin Ayre is one of the topics the team routinely went dark on. When | first met 
Wright, he called him ‘the man in Antigua’. MacGregor never mentioned him at all 
during our early meetings. When | later told him that Ramona had mentioned a big 
man in Antigua, he said he didn’t mind talking about him, but didn’t bring his name 
up again. When, in February this year, they took Wright to Antigua for a pep talk, | 
emailed Matthews to ask if | could come too, and he didn’t reply. Wright, in a low 
moment, later asked me if I’d told MacGregor they were the ones who let the cat out 
of the bag about Ayre. | said it wasn’t them: Ayre’s name had first been mentioned 
to me by Matthews. The Antigua meeting was being arranged when | went out for 
dinner with Matthews, and he referred to Ayre freely without ever asking that it be 
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off the record. MacGregor never went into detail about Ayre’s involvement but both 
men’s regular visits to Antigua made me wonder about the extent of the connection. 
Matthews, explicit as usual, always spoke about Ayre as if he was the capo di tutti 
capi of the entire affair, though | have no other evidence that Ayre was anything but 
an interested observer. Interestingly, nCrypt’s only shareholder (one share worth 
one pound) is nCrypt Holdings, registered in Antigua. 


Like MacGregor, Calvin Ayre is Canadian. His father, a pig-farmer, was convicted in 
1987 of smuggling large amounts of Jamaican marijuana to Canada. When Calvin 
left college he went to work for a heart-valve manufacturer called Bicer Medical 
Systems and was later charged with insider trading, agreeing a deal where he was 
fined $10,000 and barred from running a public company listed on the Vancouver 
Stock Exchange until 2016. ‘I clearly made some mistakes,’ Ayre told the Vancouver 
Sun, ‘but it was not a criminal issue and nobody got hurt from anything | did.’ Ayre 
later started a software development company intended to help offshore betting 
companies take online bets. He relocated to Costa Rica in 1996, where he worked 
with two online casinos, WinSports and GrandPrix. Unlike most bookmakers, Ayre 
would send cheques directly, without using Western Union or an equivalent. He 
then set up Bodog, which would become the biggest name in the online gambling 
industry. (It’s the company Matthews worked for after Centrebet.) Bodog was a 
huge success. In 2005, it handled more than $7 billion. Ayre appeared on theForbes 
billionaires’ list in 2006. In the same year, Bodog moved its global headquarters to 
Antigua. The IRS had started following the company in 2003 and US Customs and 
Immigration were also on his tail. A joint inquiry was started in 2006 and, in 2012, 
Ayre, along with two of the website’s operators, was indicted on money-laundering 
charges. He entered no plea, but he maintains his innocence, seeing the indictment 
as ‘an abuse of the criminal justice system’. In one profile of Ayre, we find him 
drinking coffee and paraphrasing Sun Tzu’s The Art of War. ‘I’ve put a lot of energy 
into finding ways not to fight my enemies,’ he says. My researcher Josh showed me 
this interview, then remembered a note from my first meeting with MacGregor, in 
which he, too, had quoted Sun Tzu. ‘You build your enemy a golden bridge to 
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retreat over,’ MacGregor had said, drinking coffee. When he said this, | wasn’t sure 
who the enemy was. The only person MacGregor had built a golden bridge for, so 
far as | knew, was Wright. 


At the Jermyn Street dinner, Matthews didn’t tell me any of Ayre’s history, referring 
to him simply as a great guy. ‘Do you know how many bitcoins Craig’s got left of the 
original 1.1 million?’ he asked later on. There are conflicting stories about the 
‘Satoshi millions’. Many people refer to a Satoshi-mined hoard that has never been 
spent, and the figure — always around a million bitcoin — is the same one admitted to 
by Wright and Kleiman. The difference is that Wright says he spent a lot of his. This 
was what Matthews was getting at. ‘He told me last week,’ Matthews said, ‘and I’ve 
been having some sledgehammer conversations with Craig. | said to him: “Time for 
straight answers on this one, my friend. How many coins are left under the control of 
the Seychelles trust? And don't tell me you don’t know because you’re a grown 
man, and don’t lie to me.” And his answer was 100,000. | know that 650,000 was 
taken out to fund all the research and development stuff. And 350,000 is on Dave’s 
hard drive. “Why has Dave got 350,000 of your coins on his encrypted hard drive?” 
Because he gave them to him. They’re Dave’s. Those wallets are encrypted on his 
hard drive, with three or four keys to his trust. Now, why did Dave die in squalor?’ 


‘Why?’ 


‘Because bitcoins weren't worth that much when Dave died. They skyrocketed 
around that time and in the weeks thereafter. But he was a man of principle 
apparently and wouldn't spend those coins unless Craig told him to.’ 


‘And you don’t think Dave mined coins himself?’ 


‘Of course he did. No doubt. But how many? Who knows ... We know they ran a 
business together based in Florida. They did stuff for contractors. We know that 
they lost money jointly in Liberty Reserve. And they would both have lost money in 
Mt Gox.’ 


Case 9:18-cv-80176-BB Document 24-1 Entered on FLSD Docket 05/14/2018 Page 53 of 96 
Wright had told me he’d lost quite a bit when the bitcoin exchange Mt Gox was 
hacked and then collapsed. He also referred, in a later email, to information that 
was seeping from the collapsed Mt Gox database, some of it linking him to Ulbricht. 
‘The amount to a large wallet was me,’ Wright told me. | took him to mean that there 
was evidence of a bitcoin transaction between him and Ulbricht. He wouldn’t explain 
further. 


As | was paying the bill, Matthews reared up. “You know Craig has gone out and 
bought himself some cars? One hundred and eighty thousand dollars’ worth of 
cars.’ (When | checked this with Wright he said the cars were leased.) ‘One of them 
stands out like the dog’s balls in the proverbial moonlight, and this is from the man 
we’re trying to keep fucking secret. How many custom BMW i8s are going around 
London? He’s spending every fucking penny that we've paid him ... Does he think 
this is just a game? You know, these guys have gone from being backyard 
scrappers and they’ve suddenly found themselves in a high-stakes poker game.’ 
Matthews said he wouldn't take any rubbish from the Wrights, and that they’d end 
up on a plane back to Australia and jail if they didn’t fulfil their end of the bargain, to 
reveal Satoshi. ‘The people that | work with are capable of deciding this was a $30 
million bad decision and write it off,’ he said. | thought this a curiously revealing line, 
and wondered again just how he expected me to use such information. 


‘You haven't asked me why I’m doing this,’ Matthews said at the end of the evening. 
He worked his way round to an answer, but it wasn’t an answer, just more 
questions. ‘Part of me,’ he said, ‘has asked over the past three or four months, why 
did | ever get involved in this? Why did Craig keep coming back to me? Why did he 
never shake out of my life? Why did he show me the Satoshi white paper in 2008? 
Why was he delivered back to me in 2015? | didn’t go looking for it.’ 


* 


Satoshi Nakamoto is not really a man; he is a manifestation of public acclamation, 
an entity made by technology, and a myth. Old-fashioned journalism might bring you 
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to him — or cause you to miss him altogether — but he was born of relationships that 
depend on concealment. A reporter was once a person who could rely on visible 
evidence, recordings, notes, statements of fact, and | gathered these assiduously, 
but this was a story that challenged the foundations on which reporting depends. | 
fought to uphold familiar standards of truth, and fought to discover new ways to 
uncover it in this underworld of companies with a vested interest in disclosing some 
things but not others, but it felt like the walls of virtual reality were forever pressing 
in on my notepad. It is standard practice in Silicon Valley for everyone, from bagel 
boy to research chief, to sign a Non-Disclosure Agreement. This is because every 
company — Apple or Microsoft or Google or Facebook — has a mission not only to 
make money but to control the narrative of who they are. A writer requires 
determination if he is to write anything about that world that isn’t paid for or 
manufactured by a company. There is nothing particularly underhand about this: 
they offer you big money up front and ask you to sign over your allegiance. But 
when you turn down this offer and they don’t banish you from the court, your version 
of reality might end up clashing with theirs. This happened several times during the 
months | was working on the Craig Wright story. Wright himself never mentioned 
rights or agreements or privacy — until the very end, when he asked for two 
particular aspects of his private life not to be discussed — but when | went to 
Australia at the end of February to talk with Wright’s family and friends, the nCrypt 
men began insisting | sign an NDA. 


Why they hadn't asked me to sign one at the beginning I'll never know. | had 
roamed freely for three months, noting and recording, going to meetings and 
interviewing everyone, and only now did they want me to sign. Early on, MacGregor 
told me in an email that he had advised Craig and Ramona to tell me ‘everything’. 
He went on to express, on Wright’s behalf, worries about how the material would be 
used. This was especially sensitive, | gathered, because of the government security 
work Wright had done. | replied that we would be judicious about what was 
published. MacGregor still wanted to discuss contractual issues, and | replied, on 6 
March, that | would have to see proof that Wright was Satoshi, and see it presented 
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before his peers and selected journalists. MacGregor replied that the proof package 
was in train and that he didn’t understand why | wouldn't sign. | replied on 7 March 
that | couldn’t write the story, no matter how good my access, if there wasn’t proof 
that Wright was Satoshi, and | was still waiting for evidence. ‘My commitment is 
clear,’ | wrote, ‘but the book turns to dust if we do not have unanswerable and 
generous proof.’ | insisted that | wouldn't sign any document and eventually 
MacGregor accepted this. We fell out over it, but | saw their point and | still do. 
Despite my refusal they continued, without binding agreements or legal constraints, 
to provide me with access to every meeting and every aspect of the story, which 
was set to change faster and in ways none of us could ever have prepared for. My 
story and nCrypt’s deal seemed to be on the same track, aligned and friendly, but 
none of us discussed what would happen if the deal came unstuck. 


Proof 


When | asked Wright what kind of martial arts he did as a kid he gave the following 
answer. ‘I did a few actually. | have studied in the Chinese forms Wing Chun, 
Tanglangquan, Kuo Shu, Duan Da, Zui Quan and /6ng xing m6 giao. | have also 
mastered Muay Thai, Kenpo and Taekwondo and Chito-ryu style karate. | started 
with karate and Ninjutsu.’ As with most things about him, it’s not that it’s not true, it 
just smells of self-doubt and a need not to hide anything positive about himself. It’s 
the kind of truth-telling that expresses fear and gives rise to doubt, but it’s not the 
same as a lie. 


Wright's mother had told me about her son’s long-standing habit of adding bits on to 
the truth, just to make it bigger. ‘When he was a teenager,’ she said, ‘he went into 
the back of a car on his bike. It threw him through the window of a parked car. 
That’s where his scar comes from. His sister accompanied him to the hospital and 
he’s telling the doctor that he’s had his nose broken twenty or so times, and the 
doctor is saying “You couldn't possibly have had it broken.” And Craig says: “I sew 


EER) 


myself up when | get injured.”” What his mother said connected with something I'd 


noticed. In what he said, he often went further than he needed to; further than he 
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ought to have done. He appeared to start with the truth, and then, slowly, he would 
inflate his part until the whole story suddenly looked weak. 


In the time since I’d last seen Matthews, he and MacGregor had been to Antigua 
with Wright and had agreed a ‘proof strategy’. | had been pushing hard for the proof, 
and Ramona had asked me several times what Wright could do to prove to me that 
he was Satoshi. MacGregor asked the same thing during a meeting | attended with 
him and the public relations firm they'd hired, the Outside Organisation. ‘It’s not 
about proving it to me,’ | said. ‘It's about proving it — full stop. You just prove it for 
the whole world to see and then everybody goes home.’ The nCrypt guys, pointing 
out that they had always intended to set up a proof session, organised a series of 
events with the help of the PR company, intended to bring Satoshi into the open. 
Originally, the plan was for the London School of Economics to host a panel 
discussion about the evidence and the findings, but someone seems to have 
blabbed to the Financial Times, which ran an article on 31 March. ‘After nearly four 
months of silence,’ the FT blogger Izabella Kaminska wrote, ‘and a bitcoin 
community mostly resigned to the notion that the story was an elaborate hoax — 
conditional approaches are being made to media and other institutions in 
connection to an upcoming “big reveal” of Wright as Satoshi Nakamoto.’ Her source 
was Clearly inside the project. ‘Wright will publicly perform a cryptographic miracle 
which proves his identity once and for all,’ she wrote. MacGregor was outraged, and 
the LSE was sacked from the project. But the first and biggest of these proofs was 
to involve Wright using Satoshi’s private encryption keys in sessions with key 
members of the bitcoin community. Jon Matonis, former head of the Bitcoin 
Foundation, agreed to take part. So did Gavin Andresen, one of the most respected 
bitcoin core developers, someone who had been there since its inception. These 
proof sessions would begin the denouement of this search for Satoshi. 


Just before these sessions took place, in April, | asked Wright what had happened 
in Antigua. ‘We discussed the whole PR strategy,’ he said. “The truth thing is going 
to happen.’ He talked about Matonis and Andresen. ‘We’re going to bring them in on 
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reveal sessions in the next few weeks. | guess that’s the way it has to be. Do | like 
it? No. But | haven't really been given a choice. I’m between a rock and a hard place 
because of whoever outed me last year.’ He said very clearly at a meeting with me 
that he would not sign with the key in public. We agreed that he would do it for me 
at home, signing with the private key from one of Satoshi's original blocks. He would 
do for me what he was going to do for Matonis and Andresen, and this would prove 
beyond doubt, he said, that he was Satoshi. We made a plan, then Wright asked me 
to come to his office so he could draw something for me on his whiteboard, a new 
timelock encryption scheme he’d come up with. He wanted to add it to the list of 
patent applications. | didn’t always know what he was talking about, but his 
expertise in certain areas was startling, and so were his obfuscations. 


* 


It was exactly 9 a.m. when | turned up at his house in South London, on one of 
those clear mornings when the planes leave trails in the sky. | knew his house by 
the BMW in the driveway, and | pressed the bell. He opened the door and a cloud of 
cologne came to meet me. In his study, there were three computers and seven 
screens. Options, Futures and Other Derivatives by John C. Hull was sitting on a 
grey sofa. There were rows of computing books and seven dead laptops stacked on 
top of a bookshelf. Even after all these months, Wright couldn't really do small talk, 
finding it hard to summon anything easy in himself. | asked him about his sofa and 
told him about a pain in my shoulder and he just said: ‘Very good.’ He made me a 
cup of tea and then beckoned me over to his main computer: it was time for him to 
prove to me that he was Satoshi. His manner was still that of a man who mildly 
resented having to prove anything. He smiled and pointed to the screen. ‘This is his 
wallet, which is open,’ he said. | saw a list of transactions with addresses specified. 
‘The initial Genesis block was hardcoded,’ he said. “There are no conflicting 
Genesis blocks. If a piece of code crashed on this machine it would still start on 
another machine with the same Genesis block. Always.’ As | was looking at the 
screen in front of me and watching his hand move the mouse, lines from the 
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Wikipedia entry on the blockchain came into my head. ‘The blockchain consists of 
blocks that hold time-stamped batches of recent valid transactions. Each block 
includes the hash of the prior block, linking the blocks together. The linked blocks 
form a chain, with each additional block reinforcing those before it.’ 


‘It can’t be moved or changed?’ 
‘No. It’s hardcoded into the original program,’ he said. 


Everything on his screen was time-stamped. | was looking at transactions from early 
January 2009. ‘l was officially canned from my job at BDO on 3 January,’ he said. 
He told me he went to his house at Port Macquarie and settled down to do the final 
work to get the bitcoin software up and running. ‘The original definition was 
published by Satoshi Nakamoto in 2008 and implemented in the original source 
code of bitcoin published in 2009,’ the Wikipedia entry said. As he explained what 
was in front of me, he clicked through the sequential blocks, the transactions 
database that underlies bitcoin. He was looking at the very earliest ones and all 
included dates, amounts of bitcoin and addresses. A long list of transactions 
showed incoming small amounts to Satoshi’s wallet. ‘Lots of people send micro 
payments to me,’ he said. “They think so much of Satoshi that they want to burn 
their pennies.’ 


‘So these fans are sending tiny payments to that known address? It is the first 
generated and the first known address?’ 


‘Yes. They’re hoping I'll do something — out myself.’ 


The address was 12c6DSiU4Rq3P4ZxziKxzrL5LmMMBrzjrJX. | could see that people 
had left messages — ‘public notes’ — for Satoshi: ‘Hey satoshi, change my life, send 
me some bitcoins!’ ‘God bless you, China.’ ‘If you are reading this, please take 
some time to remember those who died 12 years ago today in the WTC attacks.’ 
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‘The bitcoin blockchain can be used as a trusted timestamp for arbitrary messages,’ 
Wikipedia said. 


If you scroll back to the very first transaction associated with this address — 
12c6DSiIU4Rq3P4ZxziKxzrL5LmMMBrzjrJX — you find that it is the first bitcoin 
transaction recorded. It was for 50 bitcoin and remains unspent. Anyone can enter 
that bitcoin address into a search engine and inspect the history of transactions 
associated with it. ‘The Genesis block was hardcoded on 3 January 2009,’ Wright 
said to me, ‘and that was the first run. There was no previous block.’ (Under the 
heading ‘Previous Block’, there is a line of 74 zeros.) ‘Then the code was reworked,’ 
he continued, ‘and fired up and the first address that was ever created from the 
hardcoded Genesis block — the first mined address — is the one I’m sending you a 
message from.’ He was about to use the original cryptographic key to sign a 
message to me and it was as if he was dropping a sugar lump into my tea. He typed 
the words, ‘Here | am, Andrew,’ and rested his fingers. ‘This gives us that little block 
there,’ he said, before verifying the signature. He looked sheepish and resigned in 
his blue checked shirt. ‘Welcome to the bit | was hoping to bury,’ he said. He leaned 
back and | noticed a samurai sword by the desk. 


| shook his hand. Then | stared at the screen and considered how strange it would 
be to live with a secret for seven years and then feel no relief when it finally came 
out. Perhaps it never felt like a professional secret; it felt like a part of his being, and 
now he was giving it up. ‘Il want it in layman’s terms,’ | said. ‘Explain what you just 
did.’ 


‘| just digitally signed a message using the first ever mined address on bitcoin.’ 


If he had done what he appeared to have done, and what he said he’d done, then 
his claim to be Satoshi was strong. For a moment, the amassed unlikelihoods and 
dissemblings seemed circumstantial, and the case against him suddenly much more 
fanciful than the idea of him being the famously secret man who invented this 
protocol. An alternative Satoshi would have had to share his entire password hoard 
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with him, and synchronised his ‘real world’ timeline in order to be placed where 
Wright was placed and align with his email existence and his expertise. It wasn’t 
merely that Wright had been in the right place at the right time: he had been in the 
only place at the only time, and that time was stamped not only into the blockchain 
but into his correspondence and the experiences of those around him. He sat back 
in his large black chair and asked me if | wanted more tea. ‘Il could have been 
working with Satoshi, | guess,’ he said, ‘who told me he was going to fire it up at this 
time and | had all my machines ready and just took over from him. But that would 
make me Satoshi anyway.’ He stared into the bank of screens and seemed 
nostalgic for a more ghostly self, and | asked him if it felt overwhelming. 


‘| don’t care — whatever,’ he said. But of course he did care — care is what he did 
most. He was agitated through the whole process, mainly, | guessed, from an old 
cypherpunk embarrassment at having to bend to authority. He wasn’t satisfied when 
he sat back in his chair, he was annoyed and already making his detractors’ 
arguments for them. ‘They'll say | killed Satoshi and stole the keys. Having them 
doesn't prove | created them. Maybe it was a collaboration between me, Dave, Hal 
and some random person. Maybe | compromised Hal’s machine and stole 
everything and his family didn’t know. Maybe, maybe, fucking maybe. All that 
bullshit. Those people don’t believe in Occam’s razor. I’ve seen Reddit. They want 
the most convoluted explanation. But they can say what they want; I’ve got nothing 
more to prove.’ 


There is a message embedded in the Genesis block, a headline from the Times of 3 
January 2009, the day the block was mined: ‘Chancellor on brink of second bailout 
for banks.’ | later asked Wright why he’d chosen that particular headline. ‘As you 
know, | am rather anti-central/reserve bank,’ he wrote to me. ‘Il see them as the true 
cause of these issues and the bubbles and collapses. But the date was important as 
a timestamp. It means that | could not have been “pre-mining” and gaming the 
system. The first iteration of the code was finalised on 9 January 2009. The run was 
started when | was at the farm in Macquarie later that week. It means that | cannot 
have been mining for months ahead and had collected a pre-mined set of solved 
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hashes to game the system. | ran more than fifty machines, so the headline was a 
marker.’ 


The question of proof in a story about computer science is a question for the birds. If 
you can't check the maths, how can you be sure? | wrote to four Princeton and 
Stanford cryptocurrency experts during the preparation of this story and sent them 
some of Wright’s white papers. These men, who are together about to publish a 
textbook on bitcoin and blockchain technology, are obsessed with who Satoshi is, 
and obsessed with who he isn’t. But they behave like visitors to a funhouse: they 
see distorting mirrors everywhere and hear distant laughter and weird music. Some 
of them did want to see the evidence, but they didn’t want to be seen responding to 
it and | never heard from them again. And that is the kind of attitude that pervades 
the not entirely adult world of new inventions in the highly contested world of 


computer science. 


Another thing: when such people want to make a point, they often want to destroy 
those they disagree with. It’s clear how paranoia-inducing it is to be constantly 
assaulted by people who hate you for thinking your thoughts. Geek culture in 
general is fantastically vitriolic: even an issue that seems pretty marginal to the rest 
of us — like the question of who might play Captain America’s love interest — can 
easily spiral into death threats. In the world of cryptography, this has been a bar to 
invention and progress: developers are hung, drawn and quartered every day on the 
internet and they have to be unusually robust to take it. The question of how to take 
bitcoin forward has been riven with opposing views, and after Satoshi disappeared 
there was no central authority to lead the discussion or calm the waters. By 
increments, the task fell to Gavin Andresen, a Princeton graduate with experience in 
Silicon Valley. Andresen only gradually accepted the role of lead core bitcoin 
developer. This is not an official designation and he appears to have got none of the 
thanks and all the flak, but by general consensus he is the most level-headed 
thinker in the bitcoin world. One insider said there was an irony in Andresen’s 
situation that few people realised. ‘The word is that Satoshi passed the torch to 
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Gavin before he retired in 2011,’ he said. ‘In fact, it was more like Satoshi threw the 
torch at Gavin and ran away leaving him holding it.’ 


From time to time during those months, | wondered what if, in some brutally 
postmodern way, the true identity of Satoshi could never be fully ascertained? What 
if Wright had every single element necessary to prove himself, but somehow 
couldn’t? Anonymity — or at least pseudonymity — is an essential part of the 
cryptographic world. | had a job on my hands — as did MacGregor and Matthews, as 
would the core developers, as would the press — to establish the truth. Any narrative 
that is dependent on ‘outing’ such secretive people is at the mercy of their basic 
hatred of being controlled or being known, and Wright was a spectacular example of 
this. 


Andresen had been in touch with Satoshi in the early days and would have records 
of their conversations. He would presumably be able to ask Wright questions that 
only Satoshi could answer. In December, after Wired published the story about 
Wright possibly being Satoshi, Andresen told the magazine he’d never heard of 
Craig Wright. But he began to believe in Wright once he started corresponding with 
him by email in early April. At one point, Wright sent him two emails, one written in 
his own Craig Wright way, and another one, with essentially the same content, 
written as Satoshi would have written it. They discussed maths and the history of 
the invention and the problems it had faced. Within a week, Andresen was 
sufficiently convinced to get on a plane to London. He was ready to see Wright sign 
a message to him using the original Satoshi cryptographic keys. 


At this point, | began talking to Andresen. He told me he had written an email to 
Wright before getting on the plane, asking for a little more of his backstory and for 
his thoughts on ‘the state of bitcoin in 2016’. ‘He replied with a longish email,’ 
Andresen told me, ‘on the state of bitcoin and why he decided to reveal his secret 
now, then followed up with a couple of in-progress research papers. The email 
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“sounded like” the Satoshi | worked with, and the papers matched his academic, 
math-heavy voice, too.’ 


Andresen crossed the Atlantic overnight, arriving at the Covent Garden Hotel at 11 
a.m. on 7 April. He went to his room — which had been booked, as had his flight, by 
nCrypt — and had two hours’ sleep, after which MacGregor and Matthews turned up. 
‘They gave me a lot of the background and explained their involvement,’ Andresen 
told me. When Wright turned up at the hotel, Andresen found it easy to talk to him, 
‘although | was so jet-lagged at one point,’ he wrote, ‘I had to stop him from diving 
deep into a mathematical proof he’d worked out related to how blocks are validated 
in bitcoin.’ 


Matthews had booked a conference room in the basement, and MacGregor could 
see that Wright was very emotional when he entered the room. ‘He knew this was 
it, MacGregor said to me. ‘It’s one thing to prove his identity to you and me, but the 
bitcoin community is something else. He knew that they would believe Gavin. He 
knew this was it — that he would have no plausible deniability after he’d talked to 
Gavin and shown him the keys.’ Before the meeting in the basement properly 
started, Andresen said to MacGregor — as he said to me — that some of the phrases 
Wright had used in their email exchange had been ‘familiar to him; he sounded like 
the Satoshi he had been in contact with before. Andresen asked MacGregor and 
Matthews a few questions about what nCrypt hoped to achieve with this in the 
future. They didn’t go into detail about the company’s business plans, but they 
spoke about the future of bitcoin and alternative projects. Wright and Andresen 
quickly started scribbling on pieces of paper. Wright was using his big laptop to 
show his access to certain addresses. It was a strange situation in all sorts of ways, 
and the main one, perhaps, was that Andresen, who had, once upon a time, left 
behind high-paying job opportunities to work on the bitcoin project for free, was 
possibly about to meet his hero. But he stuck to practical questions. He asked 
Wright about the trust and about his bitcoin holdings and what had happened to 
them. MacGregor later told me that his first question after Matthews told him that 
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Wright was Satoshi was: ‘Well, why isn’t he sitting on an island surrounded by piles 
of gold?’ 


Wright became quite relaxed. He explained what it had cost him to keep his 
companies alive and to pay for research and development, and the supercomputer. 
It was about 5.30 p.m. when he finally logged on to his laptop to do for Andresen 
what he had done for me in his office at home, sign a message with the key and 
have it verified. Andresen looked on. Wright had just used Satoshi's key. At that 
point, it seemed to some of those in the room that Andresen’s body language had 
changed; he seemed slightly awed by the situation. He reached over to his bag and 
took out a brand-new USB stick and removed it from its wrapping. He took out his 
own laptop. ‘I need to test it on my computer,’ he said. He added that he was 
convinced, but that if people were going to ask him, he had to be able to say that 
he’d checked it independently. He pointed to Wright's laptop and said it could all 
have been pre-loaded on there, though he knew that was unlikely. But he had to 
check on his own computer and then they would be done. He said the key could be 
used on his laptop and saved to the memory stick and that Wright could keep it. But 
for his own peace of mind, and for due diligence, so that there wasn’t a chance of 
fraud, he had to see it work on a computer that wasn’t Wright's own. 


Wright suddenly baulked. He had just signed a message to Andresen from Satoshi, 
he said, and had demonstrated his complete familiarity with their correspondence, 
but, in his mind, what Andresen was now asking for was of a different order. ‘I had 
vowed,’ Wright told me, ‘never to show the key publicly and never to let it go. | 
trusted Andresen, but | couldn't do it.’ Wright got up from the table and started 
pacing. He had clearly believed he would be able to get through the proof session 
without this. In fact, he had said in my presence several times over the preceding 
months that he would never hand the key over to anyone or allow it to be copied or 
used on someone else’s machine. ‘I do not want to categorically prove keys across 
machines,’ he wrote to me in an email. To him, this would be to give Satoshi away 
and perhaps to dilute his own proclaimed connection to him. He went to a chair in 
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the corner of the room and looked up at Andresen. ‘Maybe you and | could get to 
know each other better,’ he said. 


Andresen just nodded his assent. ‘Like, trade more emails,’ Wright said, ‘and | can 
sign more messages to you.’ 


At this point, Matthews’s blood ran cold. ‘It was the only time during all the years 
that | thought: “Jesus Christ, has he been spinning us the whole time?” MacGregor 
too felt this was a very risky moment. He glanced at Matthews. There was no way 
he was going to let Andresen get back on the plane with that as a punctuation mark. 
They all felt Wright's behaviour was ludicrous: he’d demonstrated that he was 
Satoshi and only had to let this be verified on Gavin's laptop. End of story. But 
Wright spoke to me later in a way that showed his old cypherpunk suspicion had 
reared its head: what if Gavin was a plant? What if the whole thing was a plot to rob 
him of Satoshi's keys and exploit him or deny him? Wright told me he felt 
strong-armed and that, for some reason, he couldn't let this thing go and remain 
himself. 


Afterwards, Andresen was sanguine. ‘The proof session took longer than expected,’ 
he told me. ‘I insisted that the verification happen on a computer that | was 
convinced hadn't been tampered with. And they’ — Wright, Matthews and 
MacGregor — ‘insisted that the signed message never touch a computer that could 
have been tampered with (the risk would be that the proof might leak out before the 
official announcement). So we waited a bit while an assistant went to a computer 
shop and got a brand-new laptop.’ The idea had been MacGregor’s. He said the 
tension in the room was unbelievably high. Wright was refusing to do the one thing 
that would guarantee the success of his mission. He hadn't seen it coming, but 
Andresen wouldn't blindly trust Wright’s hardware, and Wright wouldn't blindly trust 
Andresen’s. The solution had to be a fresh computer straight out of the box. 
MacGregor called his assistant and gave her the task. ‘This is how you get your 
One,’ he said to her. (In his company the best score you could get in a staff 
appraisal was a One.) It was just before 6 p.m. on a Friday night and they needed a 
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brand-new laptop in Covent Garden. The assistant got hold of one and rushed over 
from Oxford Circus to the hotel. 


The new laptop was lifted out of the box. It took a while to connect it to the hotel’s 
wifi and to load the basic software. ‘During all that time, Andresen told me, ‘it was 
obvious Craig was still, even then, deeply hoping his secret identity could remain 

secret. It was emotionally difficult for him to perform that cryptographic proof.’ 


‘It was tense and there was a bit of shouting. There were a few drops during the day 
about “the evil businessman in the room”,’ MacGregor said. ‘He stopped short of 
accusing Gavin of having a key-logger, but he clearly wasn’t going to do it. He said 
he had trust issues, and he’d been attacked, and it had been so long, and he just 
couldn't bring himself over the line today, but they should keep talking. And Gavin 
was willing to do that. But we were like: “No, no, no”. | remember what | said. | said, 
“Look, Craig, you've just been alone for way too long. Gavin has dedicated a huge 
chunk of his life to what you invented. | think he has the right to see this. He is the 
friend you don’t have: Stefan and | can't fill that role for you; Ramona can't. This is 


someone who really understands what you have been trying to do.” 


There were long silences. ‘He was on the edge,’ MacGregor said. Matthews was 
practically holding his breath. He didn’t want to say too much out loud, so he texted 
MacGregor. The text said: ‘He should call Ramona.’ While MacGregor was out of 
the room Wright phoned his wife, and she said: ‘Do it.’ Everyone waited with bated 
breath as Wright used the new laptop to open the Satoshi wallet and set about 
signing a new message to Andresen. It failed. It wouldn’t verify. He tried it again and 
again, until Andresen remembered that Wright hadn't typed ‘CSW’ at the end of the 
message the way he had in the original, the one he was seeking to verify. When he 
put ‘CSW’ at the end of his message to Gavin it said: ‘Verified’. Wright had 
demonstrated, on a brand-new laptop, that he held Satoshi’s private key. They 
stood up and shook hands and Gavin thanked him for all he had done. There were 
tears in Wright's eyes. ‘His voice was breaking, MacGregor told me. ‘Gavin could 
see he was going though something.’ Both MacGregor and Matthews later said that 
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Wright was turned inside out by the session. ‘I didn’t want to just put him in a taxi,’ 
MacGregor said. Andresen was wiped out, so he went to get some fish and chips, 
and then headed to bed. ‘Craig broke down,’ MacGregor told me. ‘He said he 
thought he’d never have to do this. He said he never knew how to trust people in his 
life.’ Wright and Matthews and MacGregor went off to find a bottle of wine. ‘He was 
semi-apologising for being a pain in the ass,’ MacGregor told me, ‘but | understood 
more than ever, at that point, how hard the whole thing was for him.’ 


When | asked Andresen if he thought ending the Satoshi mystery might be good for 
the technology, he wasn’t sure. ‘On one hand,’ he said, ‘having a mysterious 
founder is a great creation myth. People love a creation myth. Knowing the real 
story might make bitcoin less interesting to people. On the other hand, money is 
supposed to be boring — something that “just works”, used by most people without 
understanding how or why it works. I’m excited to see how Craig contributes to 
making bitcoin work even better than it does today.’ | later met with Jon Matonis, 
who had been through his own proof session with Wright. He was equally 
impressed and relieved. He too believed the search for Satoshi had come to an end 
and he was looking forward to working with Wright, to seeing the patents and the 
new blockchain ideas. During our lunch in Notting Hill, Matonis suggested that this 
technology would change the world. One of the scientists said to me, ‘This isn't 
Bitcoin 2.0. This is something magnificent that will change who we are. This is Life 
2.0,’ and Matonis agreed. 


The idea was now to use the ‘proofs’ — the gathered papers, the testimonies of the 
two bitcoin experts, the use of the keys, plus solid, document-heavy answers to 
every criticism previously made of Wright — and roll them out to selected members 
of the press on a certain day. | told MacGregor and Matthews | didn’t want to go first 
with the story. | wanted to sit in on the interviews and proof sessions with the media 
organisations, and fold their reports, and the response to their reports, into my story. 


Wright began to fade as we entered the proof sessions. He went from being a man 
with a clear picture of himself, to being a fuzzy screen. He would email me at all 
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hours with a pressing sense of anxiety. He seemed to be losing it. Yet we all forged 
ahead to a conclusion that seemed much more conclusive to him than anything he 
had ever expected, or could ever bear. He had signed up for it and was now faced 
with a full-frontal assault of cameras and lights. | had once asked him if he felt 
happy hiding in the internet and he said yes, it was his home. On a good day it is 
the bright field that contains all souls but on a bad day it is the final darkness, where 
misery is gapingly exposed. | came to believe that Wright, this last year, was fighting 
for his soul on that plain, like Aeneas with his ships at his back and all hell in front of 
him, going down to an underworld where he might meet his own father. Wright told 
me, without demur, that his life had been an attempt to prove himself to his father. In 
the wee small hours, he seemed like a child whose fantasy had gone too far. And 
the fantasy was not that he is Satoshi. He may well be Satoshi. The fantasy was 
that he could live as Satoshi, and take his place among the great men, and forget 
the little boy who was slapped for losing at chess. Like Aeneas, he knew that his 
journey was as much ordeal as opportunity, and though, again like Aeneas, he had 
asked for it, the process was increasingly unendurable. ‘It is easy to descend into 
Avernus,’ the Sibyl in Seamus Heaney’s translation of Book VI of the Aeneid tells 
Aeneas: 


Death’s dark door stands open day and night. 

But to retrace your steps and get back to upper air, 
That is the task, that is the undertaking. 

Only a few have prevailed, sons of gods 

Whom Jupiter favoured, or heroes exalted to glory 
By their own worth. 


The Reveal 
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By my last weeks with Craig Wright, | was in two minds about the money men, 
probably because | liked them. And while | wanted to assert my journalistic doubts — 
preserve my innocence, stand back from the parade — my wish for the reveal to turn 
out well was beginning to cajole my judgment. | was wise enough to say no to the 
world exclusive; | still wanted material | didn’t have and | was convinced that the real 
proof of the pudding would be in the world’s tasting of it. The internet is great at 
crowdsourcing facts and establishing the accuracy of stories, and | had always felt 
this could be important. But in the meantime, | had to fight to give my doubts the 
oxygen they needed. The nCrypt boys said they understood — but did they? They 
appeared to have no Plan B if Wright couldn't prove to the world that he was who he 
said he was. People can start off by saying, ‘Write everything, warts and all,’ and 
end by saying: ‘I don’t exist, maybe you shouldn’t mention me.’ In a conversation 
with MacGregor at this point, | allowed for the possibility that | might give him a 
made-up name in the story. | said it because he seemed anxious, and because, as | 
told him at the time, he had brought the story to me and | meant him no harm — but 
this possibility depended on its being proved that Wright was Satoshi. Our 
discussion about using real names was inconclusive — during a later meeting at 
Berners Tavern, Matthews expressed the view that | should put their names in and 
make a final decision later — but the decision was really made by what the story 
became. The men in black seemed not to have prepared for any of that. They 
believed that only one big thing was going to happen: Craig Wright was going to 
emerge as Satoshi Nakamoto, the great mystery figure of the digital age, and the 
evidence would be ‘overwhelming’. In the final week, as the men prepared the 
reveal, | found my independence slipping. No doubt about it: | felt like part of the 
team. | wanted to please MacGregor — pleasing people is my chief vice as a man 
and my main virtue as a reporter — but | could have told him my work so far might 
only be fieldwork. | wouldn’t know how the story would turn out until it had turned 
out. Only in public relations is the story straight in advance. 


In private, Wright was still saying he wouldn’t ‘jump through hoops’, but then I'd find 
him agreeing to do exactly what was asked of him. Only a few nights before the 
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media appointments, | was sitting with him in the Coach & Horses in Greek Street. 
The PR company, he told me, had asked if he wanted to go on TV, and he’d said 
there was no way in hell they'd get him in front of a TV camera. Yet it was all 
happening. | mentioned the fact that MacGregor, when | first met him, had spoken 
about all this ending with a TED talk in which Satoshi would be revealed. 


yoy 


‘Rob always said “eventually”, Wright replied. 


‘But what does “eventually” mean?’ | asked. 


yy 


‘It originally meant, “if you came out”,’ Craig said. 


The PR team, at MacGregor’s behest, had been in touch with a number of 
journalists; the ones who were interested were from the BBC, the Economist and 
GQ. The inclusion of GQ had irked Wright from the start (he sees himself as an 
academic), but the PR company, the Outside Organisation, had a connection there 
— their founder was a contributing editor — and said the magazine would love the 
story. But did the PR men explain to the editors there who was behind this project to 
out Satoshi, and who was paying their fee? | later asked them by email and one of 
them replied: ‘It is not at all unusual to be instructed to represent an individual 
through an independent company. Our conversation with [GQ] and the other 
journalists was about the proposed story.’ 


| emailed him again. ‘But did you tell them,’ | wrote, ‘that the outing of Satoshi was 
being done at the behest of a commercial company?’ He didn’t reply. 


All the journalists had signed NDAs and embargos. They would each be allowed a 
brief interview with Wright after he had demonstrated to them his use of the Satoshi 
key. These meetings would take place at the offices of the PR company in 
Tottenham Court Road on Monday, 24 April and Tuesday, 25 April. | found all this a 
bit odd: Wright was being difficult, for sure, but the PR strategy was crazily 
old-fashioned. Everyone in the cryptography world knew that all Wright had to do 
was send an email from the famous Satoshi email address, alert people he was 
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going to sign a message using Satoshi's keys, do so online and move a single 
bitcoin from an early block, and the entire internet would light up like Coney Island 
for the World’s Fair. The piecemeal feeding of ‘proof to these journalists was 
compelling but anachronistic. | supposed it was an attempt to get the story out of the 
world of crypto-gab and into the real media, but it was set up with an alarming sense 
of security paranoia. Wright could never have handled a celebration, but the 
journalists were being managed to an extent that might have raised more questions 
than it answered. | was just an observer, and was worried about Wright by then, 
and, though | believed in him, | felt distinctly that there was something missing and 
something wrong. 


When | turned up at Starbucks in Tottenham Court Road, Wright, Ramona and 
Matthews were already there. Wright was sulking a little. It had been decided that, 
as well as the demonstration, the journalists would be given a memory stick to take 
away with them, showing the signed Satoshi message. (Wright later told me the 
stuff he put on it was fake. There wasn't anything on there they could understand, 
but it certainly bore no relation to any of Satoshi’s keys.) Matthews was dressed 
smartly and wearing dark glasses and Wright was wearing a gold tie and a business 
suit. Ramona sat beside him stroking his ear. ‘Let me know if you have trouble with 
the guys upstairs,’ Matthews said. He meant the PR guys. ‘Sometimes they forget 
their role.’ As usual, | found Matthews likeable and easy to talk to, but he seemed 
not to appreciate the difference between his way of talking and the circus of 
manipulation surrounding us. 


Rory Cellan-Jones, the BBC’s technology correspondent, was led into a conference 
room with his producer, Priya Patel, and Mark Ward, a technology correspondent for 
the BBC News website. Wright sat at his laptop, hardly looking up, and a screen on 
the wall showed what he was looking at. Matonis was in the room, and so was 
Matthews. Ramona had gone upstairs. Cellan-Jones was decent and professional, 
ready to get to the bottom of the story. He appeared to feel the tension, with Wright 
already behaving as if being asked questions was grossly humiliating and the 
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questioner openly hostile. But Cellan-Jones was not hostile: if anything, he was 
mildly pre-convinced, and just going about capturing the story for the layman. 


‘When | started out | asked myself what I'd need to see to know if someone who 
claimed to be Satoshi was Satoshi,’ Matonis said. ‘And you can break down three 
distinct lines of evidence: the cryptographic line, the social line and the technical 
line. Obviously, the social and technical lines are going to be more subjective ... On 
the cryptographic side, I'll explain what | witnessed personally and give you a lead 
up to what Craig’s going to demonstrate this morning.’ 


He then went into more detail about the cryptographic proof. ‘The Genesis block is 
block zero,’ Matonis said. ‘And you can’t spend any of the blocks in that chain — 
which means that the ones that come after that (which are spendable) can be 
attributed to the creator of bitcoin.’ 


‘And what would they be called?’ Cellan-Jones asked. 


‘In succession they’d be called block 1, block 2 etc. Now this morning, Craig is going 
to demonstrate signing blocks 1 through 9. | personally witnessed the signing of 
blocks 1 and 9, so this is not going to be a transfer of bitcoins, it’s going to involve a 
signing of a message, which he'll do with the private key and which will be verified 
by the public key. Are we clear on that?’ 


Eventually, Wright asked Cellan-Jones to give him a message. ‘Um. “Hi, historic 


EEE) 


message to the BBC.” Wright typed the message and added a bit of commentary 


as he did so. 


‘This message will verify, but if | change a single digit, it won't,’ Wright said as he 
signed the message using block 9. 


‘This is the only key that we know is definitely owned by Satoshi because it was 
used with Hal Finney,’ Matonis added. 
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‘So,’ Cellan-Jones said, ‘just getting this clear in my mind. We've seen Craig use a 
private key known to have been used with Hal Finney. And we've seen it verified 
with the public key.’ 


‘Yes,’ Craig said. Then he proceeded to sign a message with the key associated 
with the first ever mined bitcoin. 


‘Out of interest,’ Cellan-Jones said. ‘How many bitcoins do you have?’ 
‘Well, that would be telling,’ Wright said. 

‘Do you still mine bitcoins?’ 

‘Only for fun.’ 


Wright then went into an aria about Sartre’s speech when he turned down the Nobel 
Prize. He planned to use a hash function — which turns information into a unique set 
of letters and numbers — to attach Sartre’s famous speech cryptographically to block 
9, and then later verify it publicly on his blog. ‘He gave up the prize,’ Wright said, 
‘because “If | were to accept it, I'd become the institution.” | never wanted to sign 
Craig Wright as Satoshi,’ he continued. ‘Il haven’t done this because it’s what | 
wanted, | just can’t refuse it. Because I’ve got staff, I’ve got family. It’s what | am 
and I’m not going to deny it because that’s not the truth. So I’m choosing to sign 
Sartre because it’s not my choice, I’m not choosing to come out, I’ve been thrust 
into it.’ 

‘In what way have you been forced into it?’ Cellan-Jones asked, quite reasonably. 
‘I’ve got people mudslinging,’ Wright said. But that wasn’t true: he wasn’t feeling 
forced because of what people said. He felt forced, or obliged, to come out because 


he’d signed the deal with nCrypt in June 2015. And he deepened the lie when 
Cellan-Jones asked him why he hadn't revealed himself before. ‘I liked to go to 
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conferences, put out papers,’ he said. ‘I can’t do that now. | can never just be Craig 
again.’ 


He was asked whether he wanted to be the public face of bitcoin. 


‘| don’t want to be the public face of anything.’ He paused and looked down. He then 
said that his blog would explain everything and help people to download the 
material and understand how the keys work. 


‘When does that go live?’ Cellan-Jones asked. 
‘Monday or Tuesday.’ 


‘There will be people out there who will try desperately to prove this isn’t the case. 
Are you confident that there are no chinks in your armour?’ 


‘They'll say | stole keys, that | buried Satoshi in a ditch, they'll say all sorts of things.’ 


The BBC planned to come back the next day with cameras. Then a man arrived 
from the Economist, Ludwig Siegele, a man in a grey suit. He was less immediately 
friendly but his questions were fine-grained. You could see he wasn’t entirely 
comfortable with this very PR-managed way of outing Satoshi. Wright signed a 
message for Siegele using block 9, and had the private key verified by the 
computer. ‘I’m sorry, Siegele said, ‘but I’m still a little unsure what that proves.’ 


‘It proves | have the private keys,’ Wright said. ‘All the original private keys.’ 
‘OK, so. The first question that my readers are going to ask is: “Why now?” 


Wright didn’t hesitate. He was using his media training. ‘I’ve tried to avoid media,’ he 
said, ‘but it’s starting to affect other people. I'd prefer to stay quiet. Why now? | have 
staff, | have family ... All the innuendo, the falsehoods.’ He had never suggested to 
me, in all our months of interviews, that he was outing himself because of media 
misrepresentation. | accepted it, though, when he said it to these journalists, 
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imagining that perhaps he had realised that the tax office pressure was the real 
pressure in his life, the thing that forced the outing. | said this later to the nCrypt 
guys and they agreed. 


‘Why conceal your identity anyway?’ Siegele asked. 


‘| don’t want to be a public figure,’ Wright said. ‘lI hope people don’t listen to Craig 
Wright. They will look at the facts, not decide based on what Satoshi says.’ 


That afternoon, | went to another appointment while Wright went off to Parsons 
Green to have his photograph taken for GQ. The next morning, at Starbucks again, 
Matthews was ridiculing the whole business with the photographs, and making fun 
of the magazine’s original idea that he wear a mask in one photograph and rip it off 
in another. Matthews described what happened at the interview with the magazine’s 
senior commissioning editor, Stuart McGurk. ‘It actually went quite well,’ Wright told 
me. ‘The journalist was nice, but he brought along this complete wanker of an 
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“expert”. 


The man they were talking about is a university lecturer in cryptology. McGurk 
brought him along to help verify the claims. ‘It was hilarious,’ Matthews said. ‘Craig 
threw the guy out.’ According to one witness, he’d questioned Wright quite forcefully 
about his understanding of public and private encryption keys. ‘He was totally in the 
guy’s face at one point.’ 


‘He was telling me he was more qualified than | am,’ Wright said. ‘It became a nice 
interview but this guy was a complete idiot and | told him to get the fuck out.’ 
Matonis — who was there — said the scene was intense. | wasn’t sure it was wise to 
greet dissenters and opponents, even ones who might be wrong, that way, but 
Wright was roundly applauded for doing so. | confess | felt it was wrong to tell 
journalists only half of the story, allowing them to misunderstand the reason he was 
suddenly coming out as Satoshi. 
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* 


That day, the BBC came back. Wright was more irate than he had been the day 
before and less co-operative now that the camera crew was here. He felt he had 
done much more than he had ever wanted to and he said so, mainly under his 
breath. The cameraman set up the camera and then Cellan-Jones got into position. 
‘So who are you? And what are you about to show me?’ he asked. 


‘My name’s Craig Wright, and I’m about to demonstrate the signing of the message 
with a key that is associated with the first transaction ever done on bitcoin — a 
transaction of ten bitcoin to Hal Finney.’ 


‘And who did that first transaction?’ 

‘| did.’ 

‘And whose name is associated with that transaction?’ 
‘The moniker is Satoshi Nakamoto.’ 


‘So you're going to show me that Satoshi Nakamoto is you?’ Craig looked 
bewildered for a second and hesitated. 


‘Yes,’ he said. 
‘Are you confident that this will prove to the world that you are Satoshi?’ 


‘It proves | have keys ... other things we'll be releasing will help ... Some people will 
believe and some people won't, and, to tell you the truth, | don’t really care.’ 


‘But you can say, hand on heart, | am Satoshi Nakamoto?’ 
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‘| was the main part of it. Other people helped. At the end of the day, none of this 
would have happened without Dave Kleiman, without Hal Finney, and without those 
who took over — like Gavin and Mike.’ 


‘And this is going to have a huge effect on your life?’ 
‘Unfortunately, yes.’ 


Something changed in Wright in those few minutes. With these direct questions 
about Satoshi, his sense of himself — | don’t know how else to put it — had come 
unstuck and he became noticeably uncomfortable. He said that he wanted to make 
the point that people should stop looking to him for answers. 


‘Make that point upstairs,’ Cellan-Jones said. 
‘Upstairs?’ 
‘We're going to film a straightforward interview upstairs, without the computer.’ 


Wright muttered something and stared into the depths of his computer as if he 
wanted to escape into it and never come out. ‘I just want the basis to be on the 
computer,’ he said. 


The female producer interjected. ‘Because we haven't actually done that bit on 
camera yet,’ she said. 


The PR executive came over, a little red in the face. ‘Can we do that bit upstairs?’ 
he asked. ‘Are we all right to do the “why now?” question upstairs? And we'll be 
done?’ 


‘You know, | don’t actually watch TV,’ Wright said. 


The BBC left the room to scout out the location for the proper ‘sit-down’ interview. 
Wright complained to me that he was being pushed. ‘I just didn’t want a big facial 
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shot of me,’ he said to the PR man. ‘I preferred to be behind the screen a little bit ... 
I'm not against it, as long as | can hide behind the screen.’ The PR man said he 
didn’t have to do anything he didn’t want. 


‘I’m just doing the one question,’ Wright said. The PR man left the room leaving me 
alone with him. 


‘Does it feel completely against the grain of your nature to be asked, “Are you 
Satoshi?” like that?’ 


‘Yes. 
‘Is it a crude question to you?’ 


‘Why does it matter, other than that you need someone to attack, someone to deify. 
| mean, fuck’s sake. I'll do this. That’s it. Fuck off. | can dance around saying 
“please believe me.” But it’s more than absurd, it’s melting clocks on a landscape.’ 
At that point, the door opened and the PR consultant came in. 


‘Craig,’ he said, ‘we’ve explained to the BBC that you want to stay down here, and 
they’re all making the point that this is the last thing you'll ever do ...’ 


Craig started shaking and pushed his chair back. ‘No! No! No!’ His face was pale. 
‘You see this door,’ he said. ‘| don’t want to hear another word. It’s here, it’s my 
way. Then he walked out and slammed the door, leaving me alone in the room with 
the PR boss. 


‘We’re only doing our job,’ the boss said, with a shrug. Wright came back a second 
later and his microphone pack was trailing behind him. 


‘It's my way or | don’t come back. OK? I’m not doing this for fucking PR stuff, I’m not 
doing this for anyone else. | don’t give a fucking shit about what people say, I’d 
rather not do it. One word about it and I'll never come back. Not exaggeration. | will 
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never enter this office again. I'll never answer an email again, and I'll never talk to 
another PR person in my life again ... Got it?’ 


‘Yeah,’ the boss said. 
‘Thank you.’ 


He went out and | was alone with Wright again. ‘They've already pushed me,’ he 
said. ‘I’m already beyond where | want to be: I’m already doing a TV thing. And 
everything is always: “Let's take it a little bit further, a little bit further.” Which bit of 
“Go away” don't they get?’ 


| asked him if Kleiman would have handled it better. ‘Better than | do,’ he said. ‘He 
would still have told them to fuck off. But in a nicer way. Hal would have done it far 
better.’ 


‘What do you think they’re talking about up there?’ | asked. 


‘The fact that | don’t want to jump through their fucking bloody crap. “This man has a 
big credibility gap he’s got to overcome, I’m open to being convinced he’s Satoshi 
Dub. 


The BBC came back downstairs to ask their ‘one question’ and, naturally, 
Cellan-Jones asked more than one. In the panicked and hostile mood Wright was 
in, he needed scapegoats, and the PR weren’t meat enough and Matthews was too 
much the boss. So he scapegoated the BBC, saying, as soon as they left the room, 
that they had broken their ‘contract’ with him, that they were liars. ‘I'll never do any 
television interviews again in my life,’ he said. ‘Never.’ And as he said it, | was 
imagining him with Fox News or the rottweiler interviewers. ‘The whole thing was 
just an attempt to expose me as being something I’m not,’ he said. 


‘That was actually a pretty softball interview, Craig,’ | said. “You can’t blame them for 
turning up and asking for proof.’ 
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‘Are you talking about proof or evidence? You're conflating the two. They’re not the 
same and that’s one of the things I’m saying. | gave them proof. They want more.’ 


Wright was happy to lecture you day and night about algorithms, but he wouldn't 
name names, and he struggled to provide real-world evidence of Satoshi's 
footprints. The more | thought about it, the more | realised something was wrong, for 
him, with the footprints analogy, because if Satoshi was only one man he would only 
have one set of prints. The Satoshi who existed online could be any number of 
people. But there was something revealing about his treatment of the BBC — 
something not very nice in his attitude to people who make it their business to ask 
straight questions — and the handling of the proof sessions made it clear how much 
of a danger he was to his own credibility. A month later, when | asked Cellan-Jones 
if the PR company had ever explained to him that there was a commercial company 
behind the outing of Satoshi, he said he had never been given that information, ‘just 
that they were representing the man who was Satoshi’. 


Life Rights 


At 7.51 A.M. on 2 May 2016 all was quiet on the Twitter front. Well, not quiet, but 
the names Satoshi Nakamoto and Craig Wright were nowhere to be seen. This was 
the day of reckoning, the day the embargo would lift and the media outlets could run 
their pieces and name Satoshi. At 7.55, Game of Thrones was trending and so was 
Gerry Adams, for allegedly using the word ‘nigger’. Also trending was a wildfire in 
Fort McMurray and a bombing in West Bengal. There’s a strange feeling of supreme 
calm before a storm breaks. At 8 a.m., Wright posted a blog containing the 
supposed hash of the Sartre speech and various postings about himself as Satoshi. 
At the same moment, Gavin Andresen posted a message to his blog. Title: 
‘Satoshi’. ‘I believe Craig Steven Wright is the person who invented bitcoin,’ it 
began. 


| was flown to London to meet Dr Wright a couple of weeks ago, after an initial email 
conversation convinced me that there was a very good chance he was the same person 
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I’’d communicated with in 2010 and early 2011. After spending time with him | am 
convinced beyond a reasonable doubt: Craig Wright is Satoshi. 


Part of that time was spent on a careful cryptographic verification of messages signed 
with keys that only Satoshi should possess. But even before | witnessed the keys signed 
and then verified on a clean computer that could not have been tampered with, | was 
reasonably certain | was sitting next to the father of bitcoin. 


During our meeting, | saw the brilliant, opinionated, focused, generous — and 
privacy-seeking — person that matches the Satoshi | worked with six years ago. And he 
cleared up a lot of mysteries, including why he disappeared when he did and what he’s 
been busy with since 2011. But I’m going to respect Dr Wright’s privacy, and let him 
decide how much of that story he shares with the world. 


We love to create heroes — but also seem to love hating them if they don’t live up to some 
unattainable ideal. It would be better if Satoshi Nakamoto was the codename for an NSA 
project, or an artificial intelligence sent from the future to advance our primitive money. 
He is not, he is an imperfect human being just like the rest of us. | hope he manages to 
mostly ignore the storm that his announcement will create, and keep doing what he loves 
— learning and research and innovating. 


| am very happy to be able to say | shook his hand and thanked him for giving bitcoin to 
the world. 


Also at 8 a.m., with the embargo lifted, the first tweet appeared, from Rory 
Cellan-Jones: ‘Craig Wright tells BBC | am bitcoin inventor Satoshi Nakamoto, 
publishes evidence backing his claim.’ One minute later, a tweet appeared from 
@CalvinAyre, naming Craig Wright as the proven Satoshi. The Economistwent one 
minute later, with a link to Ludwig Seigele’s open-minded piece asking for more and 
better evidence. At 8.09 a.m. Radio 4’s Today programme broadcast Cellan-Jones’s 
report. ‘I’m about to demonstrate the signing of a message with a key that is 
associated with the first transaction ever done on bitcoin.’ The report was brief and 
quoted Wright once. It said Wright hoped to disappear and that that would be 
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difficult. They played the part of the interview where Wright said he was part of the 
group behind Satoshi. 


‘He sounds plausible,’ Justin Webb, the presenter, said, laughing. Then they played 
part of the interview with Matonis, who said he was ‘100 per cent convinced’. 


‘Why should people be excited by this?’ 
‘| put it on the level of the Gutenberg printing press,’ Matonis said. 


‘Quite a lot of people are saying that this is as important as the internet,’ 
Cellan-Jones reported, ‘and that this man — if he is the man — should be celebrated 
like Tim Berners-Lee.’ 


‘Craig Wright has just outed himself as the leader of the Satoshi Nakamoto team,’ 
the bitcoin insider lan Grigg wrote on his blog: 


Sometime in summer of 2015 the secret started to spread, and the writing was on the 
wall. An extortionist and a hacker started attacking, perhaps together, perhaps apart; to 
add to the woes, Dr Wright and his companies were engaged in a long harsh bitter battle 
with the Australian Tax Office. Since then, the team has been more or less in hiding, 
guarded, at great expense and at some fear ... Satoshi Nakamoto dies with this moment. 
Satoshi was more than a name, it was a concept, a secret, a team, a vision. Now Satoshi 
lives on in a new form — changed. Much of the secret is gone, but the vision is still there. 
Satoshi Nakamoto is dead, long live Satoshi. Yet, a warning to all. Satoshi was a vision, 
but Craig is a man. The two are not equal, not equivalent, not even close ... It is true that 
Craig is the larger part of the genius behind the team, but he could not have done it 
alone. 


Over the following two hours the words ‘Craig Wright’ were typed into search 
engines tens of thousands of times, and the Reddit forums and the cryptocurrency 
community got to work. Meanwhile, | was being copied into the emails sent from the 
PR company to nCrypt and the Wrights. It issued a press release spreading the 
news to less favoured outlets. ‘Wright's decision to go public follows a series of 


Case 9:18-cv-80176-BB Document 24-1 Entered on FLSD Docket 05/14/2018 Page 83 of 96 
misleading statements that are circulating and which he seeks to set straight,’ the 
release said. ‘Wright has also launched a blog, with a vision to create a forum about 
bitcoin, which dispels myths and helps to unleash its full potential. He will create a 
space to provide developers and producers with the real facts about the technology 
so as to encourage the widespread use of bitcoin and the blockchain.’ 


‘Great start!’ the top PR man wrote to the group at 9.31 a.m. 
‘Ta. All going well,’ Wright wrote just before ten. 
‘All going to plan,’ the second PR man echoed a few minutes later. 


‘Right on course so far,’ the first PR man wrote at 10.13 a.m. And that was the last 
of the good news to come from the world of public relations. 


By midday the blog was receiving the wrong sort of attention. A number of 
researchers had studied what Wright had written and noticed that the explanation 
was fudged — worse than fudged, it was faked. Something that he said was signed 
with the Satoshi key had, in fact, been cut and pasted from an old, publicly available 
signature associated with Nakamoto. It was astonishing and the buzz quickly grew 
fierce. All those hours in secret flats scrolled through my head. There had always 
been something missing, something he hadn't wanted to show. But was that 
because he wouldn't, or because he couldn’t? The thought that he would fake proof 
so publicly and so coarsely was hard to comprehend. He sent me an email. ‘They 
changed my blog post,’ he wrote. ‘It will be back as | wanted. But first | need to 
negotiate with Stefan.’ And | replied: ‘How did they change it?’ 


| thought he was lying. He had lied before, but to lie so transparently and so publicly 
made me think he had lost his mind. There was no way to square such actions with 
his wish to have no publicity. He had faked his own proof, and now he was being 
ripped apart on the internet. | briefly wondered if he might be enjoying the cries of 
execration, but how could he do that to Andresen and Matonis? Suddenly his 
opponents seemed wiser and greater in number. It took me a few days to see that 
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Wright’s action might be consistent with something deeper in his character. He 
never wanted to come out and when it came to it he flunked his own paternity test. 
But | had a feeling that that he was too close to the invention to be a simple hoaxer. 


‘| will explain why | think he’s probably not Satoshi,’ said Vitalik Buterin, a big wheel 
in the cryptocurrency scene, speaking at Consensus, a bitcoin conference in New 
York that day. A friend of mine was there. He said that men had started the day 
high-fiving and shouting ‘Satoshi, baby’, but that as the long day closed, his name 
became the punchline of every joke. Core developers and others were calling for 
him to sign something new and in public right away, using the Genesis block, which 
is unquestionably Nakamoto’s. One of them, Peter Todd, was quoted by Forbes: ‘All 
Wright needs to do, says Todd, is to provide a signature on the message “Craig 
Wright is Satoshi Nakamoto” signed by a key known to be Satoshi's. “This is really 
easy to do ... if you’re actually Satoshi. Also, you'll know sufficient proof has been 
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provided when it actually happens, because cryptographers will be convinced. 


That was the strangest element of all: Wright must have known, having been a 
cryptographer all his adult life, that his fraud would be spotted immediately. But 
when | asked him about it he said it wasn’t a fraud, it was a mistake. ‘I cut and 
pasted something just for the time being but knew | would change it later,’ he said. 
‘But then it went up.’ That rang hollow to me, the words of a falling man. He 
intentionally faked it. | believed at that point that he had misled his colleagues and 
tried to get out of being Satoshi, which isn’t necessarily the same thing as not being 
him. ‘I can’t think of a more convoluted way to go about claiming one is Satoshi than 
what Craig Wright has done so far,’ Jerry Brito, the executive director of Coin 
Center, told the Daily Beast. ‘He’s provided no cryptographic evidence verifiable by 
the public, and many of his answers sound plain fishy.’ Emin Gun Sirer, a Cornell 
professor who had criticised Wright before, referred to Wright's ‘meta-modernist 


play’. 


The next day, | turned up at MacGregor’s office and found him sitting with Matthews 
in a dark meeting room. They were hunched over the desk, exhausted and 


Case 9:18-cv-80176-BB Document 24-1 Entered on FLSD Docket 05/14/2018 Page 85 of 96 
shellshocked. When | asked them what happened MacGregor shook his head. It 
was the first time in six months I’d heard him sounding incoherent. ‘Craig 
happened,’ he said. ‘He got cute with the math. He has been trying to get consent 
from the trustees to get the private keys ... But he wasn’t allowed access to coin or 
to do anything other than that. So what he was trying to do was re-sign a message 
... Matthews butted in, saying Wright never had authorisation from the trust to use 
the key publicly or let anyone take it away. 


‘Why didn’t he just say that?’ | asked. 


‘You tell me,’ Matthews said. MacGregor went on to explain how a signed message 
can be used nefariously by people with enough computing power. He said the 
trustees didn’t want anyone analysing those blocks. I’m not sure if he was grasping 
at straws, but what he said didn’t explain the suddenness or the fraudulence of what 
Wright had done. MacGregor said that he and Matthews had since been with Wright 
and indicated that the encounter had been shouty and ugly. But he said it was OK 
now. ‘We have verbal consent from the trustees to move coin, and we're just waiting 
on the written consent.’ 


MacGregor and Matthews had been in the meeting room for hours trying to work 
everything out. They thought it could all still be kept on track. MacGregor was 
writing new blog posts for Wright. He asked for my help with one of them and | 
explained that | had now to distance myself from the whole thing. | had got too 
close. MacGregor said they were going to ‘flood the blog with evidence’ and get 
Wright to ‘move’ some of the Satoshi bitcoin, to transfer it to someone else in a way 
that only someone in possession of Satoshi’s private keys could do. Andresen had 
agreed to be on the other end of the coin transaction. 


‘Craig is being mauled out there,’ | said. 


Rob removed his glasses. ‘The first meeting we had with him yesterday ended with: 
“You’re fired. Buy a ticket to Sydney. You fucked us. Good luck with the ATO.” 
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‘He didn’t sleep last night,’ Matthews said. ‘He looks fucking terrible.’ 
‘He risks destroying his entire reputation.’ 


‘His and ours,’ MacGregor said. ‘I’ve been taking meetings with investment bankers 
for the last two months. I’ve pulled every string | know to get meetings with Google 
and Uber. If he goes down in flames, I'll go down with him. | mean, he’s fucked me. 
Millions of dollars out of my pocket, nine months out of my life. But what we have 
now is a very pliant Craig Wright. We're going to drag this back from the brink.’ 


‘It's a big task, Rob,’ | said. 


‘We finally beat him to a pulp today. No more decisions. This is what we’re going to 
do, because he knew the next move was pack your toothbrush and get on a plane 
and good luck in Australia.’ MacGregor told me he’d started Monday morning on an 
unbelievable high. ‘I can’t believe we kept all the puppies in the box this whole time,’ 
he’d thought to himself. ‘Nobody broke embargo, holy shit this is going to work. And 
then...’ 


We spoke about Wright's possible lies. | said that all through these proof sessions, 
he’d acted this like this was the last thing he ever wanted. 


‘That’s not true,’ MacGregor said. ‘He freaking loves it. Why was | so certain he’d do 
that BBC interview the next day? It’s adoration. He wants this more than we want 
this, but he wants to come out of this looking like he got dragged into it.’ He told me 
if everything had gone to plan, the groundwork was laid for selling the patents. It 
was a really big deal. He said Ramona had said that if Wright doesn’t come out you 
still have this really smart guy who has made all these patents, who knows all about 
bitcoin. ‘Yeah,’ MacGregor said. “You and five hundred other guys who have called 
today.’ | shook their hands and wished them luck, thinking | would probably never 
see the men in black again. And as | descended in the lift, | thought | would miss 
their brio and their belief, despite everything. 
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Craig was lost in some labyrinth of his own making, or mostly of his own making. He 
didn’t want to be Satoshi. And he didn’t want to be Craig. And he didn’t want to be a 
letdown. And yet the message boards lit up and the walls closed in. Over the next 
24 hours, he agreed to move Satoshi's coin and his blog advertised the fact. It said, 
‘Extraordinary claims require extraordinary proof,’ and he was set to provide it. 


The next day, Wednesday, 4 May, Matthews was at Wright’s house organising the 
movement of coin. The new (and final) proof session was intended to blow away the 
doubts created by the first. Many commentators felt it was too late, that Wright was 
beyond the pale, but Matthews and MacGregor had agreed with Andresen that the 
movement of coin, to Andresen and also to Cellan-Jones at the BBC, would undo 
the damage. Wright spoke to Andresen on the phone from his house — Andresen 
was in New York — and told him he was worried about a security flaw in the early 
blockchain, a problem in the way those first blocks were constructed that would 
make it dangerous for him to move coin, exposing him to exploitation or theft. My 
sources say that Andresen understood the problem and confirmed that it was all 
right, it had been fixed. But Wright continued to worry and was showing great 
reluctance about offering the final proof. Then he left the room abruptly and didn’t 
come back. 


The next day, he sent me an email. It linked to an article headlined ‘UK Law 
Enforcement Sources Hint at Impending Craig Wright Arrest’. The article suggested 
that the father of bitcoin might be liable, under the Terrorism Act, for the actions of 
people who used bitcoin to buy weapons. Under the link, Wright had written an 
explanation: ‘I walk from 1 billion or | go to jail. | never wanted to be out, but if | 
prove it, they destroy me and my family. | am the source of terrorist funds as bitcoin 
creator or | am a fraud to the world. At least a fraud is able to see his family. There 
is nothing | can do.’ 


He was devastated. He was the runner who failed twenty yards short of the finishing 
tape, the man who froze at the moment of truth, and started walking backwards. He 
said he feared prosecution on the one hand and humiliation on the other. The 
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borstal boy in Alan Sillitoe’s ‘The Loneliness of the Long Distance Runner’ comes 
from a family who make much of running, ‘especially running away from the police’. 
He hates being understood, feels authority is only there to grind you down, and 
holds on to his essential privacy, knowing ‘they can’t make an X-ray of our guts to 
find out what we’re telling ourselves.’ The boy lives on his own terms, which means 
not faking it for power, even when the pressure is high and the rewards are obvious. 
So he refuses to win. Representing the borstal in a championship race he is well 
ahead of the other runners, but he stops, and lets them pass, and at the end jogs up 
to the tape: ‘I got to the rope,’ Sillitoe writes, ‘and collapsed, with a 
murderous-sounding roar going up through my ears while | was still on the wrong 
side of it.’ In another email that day Wright wrote: ‘Andrew, | don’t know what | can 
say. If | was to do the proof and save myself, | damn myself.’ That afternoon, he 
closed down the blog — the one that was intended to lead cryptocurrency fans into a 
new era — but left a final posting: 


I’m sorry. | believed that | could do this. | believed that | could put the years of anonymity 
and hiding behind me. But, as the events of this week unfolded and | prepared to publish 
the proof of access to the earliest keys, | broke. | do not have the courage. | cannot. 
When the rumours began, my qualifications and character were attacked. When those 
allegations were proven false, new allegations have already begun. | know now that | am 
not strong enough for this. | know that this weakness will cause great damage to those 
that have supported me, and particularly to Jon Matonis and Gavin Andresen. | can only 
hope that their honour and credibility is not irreparably tainted by my actions. They were 
not deceived, but | know that the world will never believe that now. | can only say I’m 
sorry. 


And goodbye. 


The next morning | drove through the traffic to a London suburb. It was early in the 
day and the high streets were empty, the happy boutiques, the delis and the 
wicker-and-candle dens where people come to improve their mood or do something 
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about their lifestyle. Craig and Ramona were sitting in the corner of a popular café. 
They were holding hands and staring at the table. He was wearing his Billabong 
T-shirt — | remembered it from his description of the clothes he’d bought in Auckland 
when he began his long-distance run last December. He looked as he'd looked the 
first night | met him in Mayfair: unshaven, unslept, the scar on his face more livid, 
his pupils like pinpricks and his breathing heavy. He wasn't just white, he was 
empty-looking, and his hands were trembling. Ramona was crying. The light of the 
café seemed too much for the darkness enclosing them. | went to shake his hand 
but we hugged instead, and it was like embracing a drowning man. He hadn't really 
slept since Monday and this was Friday. He wasn't drinking his latte, he made 
clouds on the spoon, and stared. 


‘Well, it was worth about a billion dollars to them,’ he said. Ramona talked about jail 
and | asked if they were afraid of being prosecuted. 


‘They say it'll never happen,’ she said. ‘Of course it will ... So how can he? How can 
he?’ He spoke of men he knew who had sold bitcoin and had been prosecuted for 
money-laundering and said they might try to do that to him. ‘It was always a present 
danger,’ Ramona said. MacGregor, Wright alleged, had always had a plan to move 
him if necessary to Manila or Antigua if it looked like he might be arrested. 


‘It's always been incremental,’ Craig said. ‘One step, one step, and nobody realises 
that eventually that takes you over a precipice.’ 


‘That’s the thing,’ Ramona said. ‘Your happiness doesn’t count at all. But now we’re 
stuck. You come out — you go to jail. You don’t come out — you’re a fraud. It’s got to 
the point where it’s almost better if he’s a fraud.’ 


‘So what happened on Monday,’ | asked, ‘when it came to writing that blog?’ 


‘| gave them the wrong thing,’ he said. ‘Then they changed it. Then | didn’t correct it 
because | was so angry. Which was stupid. | put up the wrong one. No one wants 
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SN. | will never be SN. I’m not personable. You can lock me in a room and I'll write 
papers, I'll never be personable.’ 


Ramona was crying. ‘They could take us down,’ she said. ‘They could really take 
you down if they want to.’ 


They spoke about moneymaking ventures Wright was involved in a long time ago. 
Wright alleged Matthews knew about these activities, which was true, because 
Matthews had mentioned them to me. 


‘| just couldn’t do things anymore,’ he said. ‘That’s all.’ 


They wanted to talk about the trust, but they didn’t really explain it. He said it was to 
hide the bitcoin. ‘It's not meant to be spent,’ he said. ‘Too many problems.’ 


‘It's also a guarantee that you can’t flood the market,’ Ramona said. ‘That we can’t 
use it to pay the bills, no matter how desperate things get.’ When | asked who the 
trustees were they went quiet. 


Ramona began to worry about my story. She tried to strong-arm me. She began to 
tell me what | should say and what | shouldn’t say and how | should hide from 
MacGregor and Matthews the comments she and Wright had made about them. ‘I 
want to write the truth,’ | said. 


She said | knew too much. She said that Craig would go to jail or harm himself if | 
told everything | knew. | was stunned. There were many things that were said to me 
by every party in this story that | would choose not to print. Not only things they said 
about one another, but business arrangements and unsubstantiated allegations 
about the past, and things | knew in the present. But | had been recording this as a 
documentary from the start, as I’d said | would when we met at Claridge’s in 
December. Now | was being told that my material was too hot and my story posed a 
threat. 


Case 9:18-cv-80176-BB Document 24-1 Entered on FLSD Docket 05/14/2018 Page 91 of 96 
Craig suddenly got very upset. His face crumpled and he put his head in his hands. 
‘And the Brits have their equivalent of Guantanamo Bay as well,’ he said. ‘I'll never 
write, I'll never see anyone. I'll be in a little room. | won’t even have a pen and 
paper. | won’t see my wife again. I'll never see ...’ He sobbed and was inconsolable. 
‘I'll never write again.’ 


‘They won't do that,’ Ramona said. | suggested they might get a lawyer to advise 
them on the possible threats they faced. Ramona said it was too expensive. She 
said the bills would run into the millions. Craig talked about lan Grigg and others 
who'd ‘outed’ him last year by nominating him for various awards. Satoshi was 
nominated for a Nobel Prize and a Turing Prize. Wright told me that people in the 
bitcoin community wanted him to come out and receive recognition. He said it had 
never been in his interest to come out, but in other people’s interest. ‘| don’t care if 
people like my work,’ he said. ‘I just have to do my work. That's the only thing that'll 
keep me sane.’ 


‘| would like that his reputation gets redeemed but | don’t know if that’s possible,’ 
Ramona told me. ‘This is what | propose, if you can do it, you do it, if you can't, it’s 
up to you. If [you say] he didn’t choose to come out ... then the company gets put in 
the spotlight. If you say you know he is Satoshi then we're in trouble. If you say you 
have your doubts then he looks like a fool.’ 


I'm sure | looked at her disbelievingly. “You’re basically saying that every version of 
the truth of this story is untellable.’ 


‘But if you say it, Andrew ...’ 


‘If you were sure that this could never be said in the end, then you should never 
have allowed it to happen.’ 


‘It was one step, then one step ...’ Craig said, again. 
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‘And you let a writer into your life?’ | said. 


‘Do you know how much this meant to me?’ Craig said. ‘The company. The people. 
To be doing that. To get all these papers out. To be in that position. It’s my idea of 
heaven, but the cost is hell.’ 


‘If we didn’t co-operate with you,’ Ramona said, ‘they’d stop ...’ 


| reminded them that every time I’d tried to walk away from this story — like when 
they tried to make me sign an NDA — she’d begged me to come back. | told them 
that full disclosure was much less damaging than any other option. Naturally 
enough, that was my view. 


‘No one wants to believe me,’ Craig said. 

‘And | think that’s great,’ Ramona said. ‘It’s great that no one wants to believe you.’ 
Craig said he’d filed all these patents and they were all from him, ‘not just Dave’. 
‘What do you mean,’ | asked. “Not just Dave?” 

‘!mean | wrote those patents,’ he said. ‘It means | knew all this shit.’ 

‘Have you been able to talk to Matonis or Andresen?’ | asked. 

‘No,’ Ramona said. ‘| don’t Know if they’ll even talk to us.’ 

‘| think you should have some crisis management advice.’ 

‘From who?’ 


‘From a therapist.’ 


‘We don’t have time for that,’ she said. 
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| walked home with them and he slumped on a sofa, looking wan, gone. ‘His mental 
health is fucked,’ she said to me when he was out of the room. ‘If he goes to jail, 
he'll kill himself. | can’t leave him alone.’ 


When he returned he seemed almost paler than before. ‘This is all because | wrote 
code,’ Craig said. ‘Not because | blew up something, because | wrote code.’ 


‘Just out of interest,’ | said. ‘If you are a fraud ... How hard a fraud would it have 
been to perpetrate?’ 


‘It would be the best one in human history,’ Craig said. ‘It'd be Ronnie Biggs on 
steroids times a million. | invented a new form of money. Who has ever had 
anything to do with money that wasn’t to do with government? Who has ever really 
succeeded?’ 


‘You mean it’s a thankless task?’ 


‘It's always Prometheus,’ he said. 


This was a story in which everybody wanted their story told, then untold, then 
hidden, back in the vaults. It seemed like a very new story, but, in fact, it was a very 
old one, a story of metamorphosis, and of Prometheus unbound. Craig Wright 
proved cryptographically that he had Satoshi’s keys, his emails seemed to show his 
involvement, his science extrapolated on the technology of the blockchain, and he 
spent a full year engaged in a business plan to reveal it all. But, when it came to it, 
he behaved like a fraud, he shape-shifted and he dissolved. 


| began to wonder whether Craig Wright might be a man who had never known who 
he was, a missing person, constantly in discussion with some inner lost boy, unable 
to bear the conditions which forced him to say definitively who he was. Some 

people, it could be said, really aren't anyone, in the sense that the complications of 
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being themselves have wiped them out. The internet eats its own ciphers, and 
Wright is one of them. He might have sabotaged his own proof or simply flunked the 
paternity test because he isn’t the right man, but his own doubts about himself are 
the real drama. He was sick, he was brilliant, he was manipulative — but much of 
what he said was true. And as | drove away that morning, it was the sickness that 
seemed predominant. Wright was a clever man who had gone to the very end of 
himself to prove who he wasn't. ‘We are all Satoshi now,’ became a tagline for 
bitcoin’s early fans. And in the end we all are Satoshi, and we'll begin to accept it as 
paper currency starts to look stale, and our minds merge with our computers. There 
are new networks up ahead that will have grown from the seed Satoshi planted, and 
it was odd, after all my travels, to believe that the only man who wanted to opt out of 
being Satoshi was Craig Wright. A week after his ‘proof sessions’ with the BBC and 
others, he was in complete disgrace, his corner office at nCrypt had been emptied 
and his leather sofas had disappeared, removed from the building with the signed 
Muhammad Ali picture and the rest of his stuff. Without ceremony, the best room in 
the office became a conference room and his name was spoken in whispers. 


My last meeting with MacGregor and Matthews was a time of conjecture and anger, 
devastation and apology. They felt Wright had perjured himself, and for no good 
reason. He had never admitted to problems with the trust, problems that would, 
though he hadn't admitted it, make the Satoshi reveal very difficult for him. They still 
believe, as do Andresen and Matonis, that he is Satoshi. To them, there is just too 
much evidence to accept Wright's late attempt to cloak himself in deniability. But no 
matter. He was now fired, they said, and the deal with Google was off. ‘He put a gun 
to our head and pulled the trigger,’ MacGregor told me. “The world is still going to 
think we got fooled, but | know the facts. He has the keys.’ There was a moment in 
our meeting when | realised this had gone all the way to the bone with MacGregor. 
He said he never wanted to see Wright again. ‘This was supposed to be so noble,’ 
he said, ‘and it became so dark.’ Matthews told me that Wright’s office, his house, 
his job, his work visa, everything, was set to go. They had spent as much as $15 
million and maybe lost a billion. MacGregor said the PR company would never deal 
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with him again, and there were investment bankers who weren't picking up his calls. 
A way would be found, however, to continue developing the blockchain technology. 
The company would go on. MacGregor shook his head. The whole thing was 
unfathomable. It was baffling. For no obvious reason Wright had found a way to 
disappear back into the shadows. 


Coda 


He seemed to miss me. Craig wanted to meet. It was a few weeks after the abortive 
‘reveal’ and | saw when | got to Patisserie Valerie that he was happy again and 
ready to take on the world. ‘It was unfair of me to request you not to publish certain 
things about our situation,’ Ramona had written to me in an email. ‘As you said, you 
have a debt to the truth, and that is as it should be.’ And yet, as we all know, the 
truth has more faces than the town clock. 


Wright told me in Patisserie Valerie that he felt free again. He had lost a third share 
in a billion dollars but he felt unburdened. He was sorry to have let good people 
down but now he could work in peace. Sherlock Holmes’s central precept came into 
my mind. ‘When you have eliminated the impossible, whatever remains, however 
improbable, must be the truth.’ 


‘Do you want to know what | think?’ | said to him after he told me again that all 
would be well from now on. 


‘Yes. 


‘What if you were 30 per cent Satoshi. You were there at its formation and you were 
part of a brilliant group. You coded and you synthesised other people’s work and 
you shared in the encryption keys. Then, some time in the last year, you upgraded 
yourself to 80 or 90 per cent. You were already a lot more Satoshi than anybody 
else has been hitherto, but the deal, in your eyes, required you to be more and in 
the end you couldn't carry that off.’ 
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‘No,’ he said. And he flew off on a tangent about elliptical curves and the nature of 
the blockchain and how he never wanted to be a deity. | turned off my recording 
head at that point and stared through him. 


Outside the café, he shook my hand. | Knew | would never see him again. For six 
months we had allowed each other to think we were friends — subjects need 
storytellers, and storytellers need subjects. There had been a time when he'd 
imagined that | could free him from his fictions and build him a new story in reality. | 
was a willing stenographer, thinking Wright was something perhaps bigger than 
Satoshi. He was the internet's habit of self-dramatisation and self-concealment all at 
once; its new sort of persona. What he actually did may never be known. Either he’s 
one of the greatest computer scientists of his generation, or he’s a reckless 
opportunist, or he’s both. We can’t be sure. But there he was, standing in Old 
Compton Street in the pouring rain, saying sorry. 


